Maarten Vanraes wrote:
Hey,
a few years back i wrote an overlay module "modtrigger", that executes a script on modifications.
The preferred approach these days is to use slapo-sock.
fork/exec is still risky on some threading implementations. This is also why back-shell is not recommended for general use.
Some of the comments i got was that it should really require to work with the new config structure.
Finally i've done that, but i'm sure it could be improved.
So, i'm kind of asking if someone can review it and give some pointers to improve.
and next if it's possible to include in the openldap distribution, in the overlay section or contrib section.
Thanks for the effort but I don't believe it would be a good idea to include this code for the above reasons.
ugh, great...
otoh, if back-shell is not recommended, then modtrigger could be there anyway. if the system is properly shielded and limited (eg: cgroups), then the sysadmin could actually use this, no?