Page MenuHomePhabricator

cn=proxyagent,ou=profile,dc=wikimedia,dc=org should probably not allow unindexed searches
Open, MediumPublic

Description

Right now we depend on unindexed searches to make some ldap tools work, e.g. ldaplist and OpenStackManager. Probably those tools should be changed to do indexed searches and the unindexed-search priv removed from proxy-agent and possibly novaadmin as well.


Version: unspecified
Severity: normal

Details

Reference
bz71130

Event Timeline

bzimport raised the priority of this task from to Needs Triage.Nov 22 2014, 3:45 AM
bzimport added a project: Cloud-VPS.
bzimport set Reference to bz71130.
bzimport added a subscriber: Unknown Object (MLST).
chasemp subscribed.