slapd apparmor profile needs update for multiple databases

Bug #286614 reported by PatRiehecky
10
Affects Status Importance Assigned to Milestone
openldap (Ubuntu)
Fix Released
Low
Mathias Gug

Bug Description

Binary package hint: slapd

When adding another database (like accesslog, which is provided with the package) there must be a place to store the corresponding bdb files. Traditionally the place is /var/lib/ldap/<dbname> but the apparmor profile prevents these from being used.

The below diff corrects this problem so that any directory under /var/lib/ldap can be used by slapd as a bdb directory. This bug is visible in Hardy and Intrepid.

--- usr.sbin.slapd_orig 2008-10-20 15:17:36.000000000 -0500
+++ usr.sbin.slapd 2008-10-20 15:14:11.000000000 -0500
@@ -35,7 +35,7 @@

   # the databases and logs
   /var/lib/ldap/ r,
- /var/lib/ldap/* rw,
+ /var/lib/ldap/** rwk,

   # lock file
   /var/lib/ldap/alock kw,

Mathias Gug (mathiaz)
Changed in openldap:
importance: Undecided → Low
status: New → Triaged
Mathias Gug (mathiaz)
Changed in openldap:
assignee: nobody → mathiaz
status: Triaged → In Progress
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package openldap - 2.4.15-1ubuntu2

---------------
openldap (2.4.15-1ubuntu2) jaunty; urgency=low

  * debian/slapd.postinst: create /var/run/slapd before updating its
    permissions (LP: #298928).
  * debian/slapd.init: Correclty set slapd config backend option even if the
    pidfile is configured in slapd default file (LP: #292364).
  * debian/apparmor-profile: support multiple databases to be stored under
    /var/lib/ldap/. (LP: #286614).

 -- Mathias Gug <email address hidden> Fri, 13 Mar 2009 13:56:12 -0400

Changed in openldap:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.