From: Ondřej Kuzník <ondra@mistotebe.net>
Date: Tue, 15 Jun 2021 15:32:38 +0000 (+0100)
Subject: ITS#9575 Warn when specifying olcPasswordHash in the cn=config entry
X-Git-Tag: OPENLDAP_REL_ENG_2_6_0~195
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f016d88786a1cc45e0a4c89dd639a96dc9ce6b64;p=thirdparty%2Fopenldap.git

ITS#9575 Warn when specifying olcPasswordHash in the cn=config entry
---

diff --git a/servers/slapd/bconfig.c b/servers/slapd/bconfig.c
index 8a545cad65..63d04967f3 100644
--- a/servers/slapd/bconfig.c
+++ b/servers/slapd/bconfig.c
@@ -2590,6 +2590,13 @@ config_passwd_hash(ConfigArgs *c) {
 		}
 		return 0;
 	}
+	if ( c->table == Cft_Global ) {
+		Debug( LDAP_DEBUG_ANY, "%s: setting password scheme in the global "
+				"entry is deprecated. The server may refuse to start if "
+				"it is provided by a loadable module, please move it to "
+				"the frontend database instead\n",
+				c->log );
+	}
 	for(i = 1; i < c->argc; i++) {
 		if(!lutil_passwd_scheme(c->argv[i])) {
 			snprintf( c->cr_msg, sizeof( c->cr_msg ), "<%s> scheme not available", c->argv[0] );