#1108711 ldapvi: please provide option to read bind password from file

Package:
ldapvi
Source:
ldapvi
Description:
perform an LDAP search and update results using a text editor
Submitter:
Ansgar
Date:
2025-07-03 16:03:02 UTC
Severity:
normal
Tags:
#1108711#5
Date:
2025-07-03 15:52:47 UTC
From:
To:
Hi,

ldapvi has an option to pass the bind password via a command-line
parameter:

  -w, --password SECRET  Password (also valid for SASL).

However passing credentials in this way is often insecure as other
local users/processes can see command-line parameters of all running
programs.

It would be great if one could ask ldapvi to use the contents of a
file as the password, similar to OpenLDAP's command-line utilities
(ldapsearch & others):

       -y passwdfile
              Use complete contents of passwdfile as the password for simple authentication.

If this was implemented, one could pass credentials from a password
manager to ldapvi in a more secure fashion without having to manually
paste it at the right time. (I have convenience wrappers around
ldapsearch to invoke it with `-y $(password-manager)` so it just
works.)

Ansgar