[Kolab-devel] [issue467] slapd.replicas readable for all after adding slave

[Bernhard Herzog]

New submission from Bernhard Herzog <bh at intevation.de>:

After adding a slave via the Services page of the master's web-admin interface a
/kolab/etc/openldap/slapd.replicas is regenerated to include the new slave. 
After that it is world readable even though it contains passwords.  The backup
slapd.replicas.old is only readable by the user kolab though.  In my case the
original is the one from immediately after boot strap of he master during which
I did not specify any slaves.

----------
assignedto: steffen
messages: 2466
nosy: bh, steffen
priority: bug
status: unread
title: slapd.replicas readable for all after adding slave
topic: proko2, server
________________________________________________
Kolab issue tracker <kolab-issues at intevation.de>
<https://intevation.de/roundup/kolab/issue467>
________________________________________________