Friday, June 19, 2009

Start ldap with non-root

On Fri, Aug 15, 2003 at 09:59:36AM -0700, Ben Poliakoff wrote:
> Of course slapd's "-u USER" option will direct it to run as whatever
> arbitrary user, but unless that user is root you'll need to run the
> service on a >1024 high port.

so, if you expect to start ldap with non-root, you must change the port of ldap > 1024. In this case, i'm using 1025 for my ldap .
My OS: FreeBSD

#=========/etc/rc.conf
slapd_enable="YES"
slapd_flags='-h "ldapi://%2fvar%2frun%2fopenldap%2fldapi/ ldap://192.168.1.235:1025/"'
slapd_sockets="/var/run/openldap/ldapi"

No comments: