sasl ldap problem

[Sascha Wilde]

Divan Santana <Divan.Santana at gmail.com> writes:

> I am glad to contribute this fix back. I hope someone finds it useful.
> I think it might be kubuntu specific.
>
> http://www.kolab.org/pipermail/kolab-users/2006-February/004394.html
> mv /dev/random /dev/random.backup
> ln -s /dev/urandom /dev/random

Please note that this "fix" introduces serious security issues!

It replaces the widely used user land interface to a source of "true"
randomness with one, which will instrument a pseudo random generator
when running out of entropy.  See random(4) for further information.

This will not only affect POP3S and other SSL secured network
protocols, but many (any?) other cryptographic applications (for
example GnuPG) running on the host, too.

So please DON'T DO THIS until you are running _only_ applications with
low security requisitions on the system in question.

cheers
sascha
-- 
Sascha Wilde                                 Intevation GmbH

wilde at intevation.de                          intevation at intevation.de
http://www.intevation.de/~wilde/             http://www.intevation.de/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 188 bytes
Desc: not available
URL: <http://lists.kolab.org/pipermail/users/attachments/20061117/05fadde5/attachment.sig>