Beefy Boxes and Bandwidth Generously Provided by pair Networks
Welcome to the Monastery
 
PerlMonks  

Re: Samba-LDAP Developer Release

by idsfa (Vicar)
on Mar 24, 2006 at 00:03 UTC ( #538906=note: print w/ replies, xml ) Need Help??


in reply to Samba-LDAP Developer Release

I stopped reading at this part in Samba::LDAP:

if ( $self->{ldapTLS} == 1 ) { $ldap_master->start_tls( verify => $self->{verify}, clientcert => $self->{clientcert}, clientkey => $self->{clientkey}, cafile => $self->{cafile}, ); } $ldap_master->bind( $self->{masterDN}, password => $self->{masterP +w}, );

Please, please, please confirm that the requested TLS connection worked before you send a Domain Admin privileged account and password over the connection. The needed code looks like:

$ladp_master->code && die "failed to start TLS: ", $ldap_master->e +rror ;

The same holds true for the _slave function.

Updated: Okay I read some more. I'm twitching about:

if ($homedir) { my @rmargs = ('-rf'); # print "rm @rmargs $homedir\n"; system( 'rm', @rmargs, $homedir ); }

in Samba::LDAP::User. So many possible values of $homedir lead to ruin.

In general, there appears to be a lot of shelling out functionality that could be done in pure perl.


The intelligent reader will judge for himself. Without examining the facts fully and fairly, there is no way of knowing whether vox populi is really vox dei, or merely vox asinorum. — Cyrus H. Gordon


Comment on Re: Samba-LDAP Developer Release
Select or Download Code
Re^2: Samba-LDAP Developer Release
by ghenry (Vicar) on Mar 24, 2006 at 07:15 UTC

    Thanks for taking the time to read some of it idsfa.

    Like I said, I haven't really touched/cleaned up any of the original code. The above isn't mine, all I have done so far is split everything up into classes and move things to methods.

    I saw the above right away too, but in the next release, things like this will be re-written and removed.

    Thanks though.
    Gavin.

    Walking the road to enlightenment... I found a penguin and a camel on the way.....
    Fancy a yourname@perl.me.uk? Just ask!!!

Log In?
Username:
Password:

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://538906]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others having an uproarious good time at the Monastery: (5)
As of 2014-12-22 01:06 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    Is guessing a good strategy for surviving in the IT business?





    Results (110 votes), past polls