[Kolab-devel] [issue998] kolab adduser and kolab deluser scripts use manager password on command line

[Thomas Arendsen Hein]

New submission from Thomas Arendsen Hein <thomas at intevation.de>:

With kolab server 2.0 and 2.1:

/kolab/libexec/kolab/adduser uses ldapadd ... -w $BINDPW
/kolab/libexec/kolab/deluser uses ldapmodify ... -w $BINDPW

1. The password may be visible for other users on the system.
2. The password isn't quoted.

----------
messages: 5881
nosy: bernhard, bh, steffen, thomas
priority: bug
status: unread
title: kolab adduser and kolab deluser scripts use manager password on command line
topic: server
________________________________________________
Kolab issue tracker <kolab-issues at intevation.de>
<https://intevation.de/roundup/kolab/issue998>
________________________________________________