Re: (ITS#8786) Allow OpenLDAP to start as non-root

akram.benaissi@gmail.com wrote:

Full_Name: Akram Ben Aissi Version: 1.1.10 OS: Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (77.154.204.242)

Hi,

We want to run OpenLDAP in containers without root privilege, nor root user id. Actually, we start it with user uid=100000009, gid=0 And we do proper chgrp 0 and chmod 0770 on require directories.

Because of this: https://github.com/winlibs/openldap/blob/master/servers/slapd/user.c#L158

we have that: Could not set real user id to 100000009

It would be better to check that setuid is required only if asked user is different from actual user.

Does it make sense ?

No. Just start slapd without specifying a userID.

Closing this ITS.