openldap/libraries
Kurt Zeilenga 8de258d2e2 Patch: 'ldapmodify -y file' reads password from file (ITS#2031)
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
            ================
Adapted by Kurt Zeilenga for inclusion in OpenLDAP.  My comments are
marked with enclosed with square brackets (e.g. [Kurt's comment] below.
            ================

If I run ldapmodify & co from a script, I don't want to use '-W password'
because the password shows up in the output of 'ps' for everyone,
and I can't pipe the password to 'ldapmodify -w' because -w uses
getpassphrase() which reads from the tty instead of stdin.
So I added '-y file' which reads the password from file.  The programs
exit if the file cannot be read.

[Complete contents of file is used as password.  Use:
	echo -n "secret" > password
to create a file with "secret" as the password.  The -n avoids
adding a newline (which would invalidate the password).  Note
that echo is a builtin and hence its arguments are not visible
to 'ps'.]

I changed ldapmodify, ldapmodrdn, ldapdelete, ldapsearch, ldapcompare.
I did not bother to change ldappasswd and ldapwhoami, because they
prompt for many passwords.  [I fixed up ldapwhoami.]

Rerun autoconf after applying this patch. [Done.]

Note:  I do not know if Windows NT has fstat(), so I set HAVE_FSTAT to
undef in portable.nt.  (fstat() is used to warn if the file is publicly
readable or writeable.)  [I used fstat() to set the buffer size to
read.]

[Note: using the contents of a file extends the tools to support
passwords which could not normally be provided using getpassphrase()
or via the command line.]

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, Aug 2002.
[Kurt D. Zeilenga <kurt@openldap.org>, Aug 2002.]
2002-08-24 05:47:17 +00:00
..
libavl test programs need -llutil 2002-07-27 03:20:47 +00:00
liblber ITS#1998 ber_mem2bv should accept 0-length calls, just like ber_strdup. 2002-08-06 02:35:51 +00:00
libldap add upper/lower funcs that also compute the length of the string (not used yet) 2002-08-23 08:45:17 +00:00
libldap_r Added thread-pool getkey/setkey functions 2002-08-24 05:39:43 +00:00
libldbm Added support for BDB 4.1.17 2002-08-22 04:00:06 +00:00
libldif Mostly based on patches provided by Hallvard B. Furuseth 2002-04-08 09:43:22 +00:00
liblunicode NT port fixes 2002-08-24 00:37:59 +00:00
liblutil Patch: 'ldapmodify -y file' reads password from file (ITS#2031) 2002-08-24 05:47:17 +00:00
librewrite Zap LDAPv2-only stuff 2002-08-08 03:01:14 +00:00
Makefile.in Make liblutil before liblunicde, ucgendat needs liblutil 2002-07-26 03:17:21 +00:00