https://fedorahosted.org/sssd/ticket/1640
From 21b5b7aa94245624fa160597ab20aac7693a088f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Pavel=20B=C5=99ezina?= <pbrez...@redhat.com> Date: Tue, 13 Nov 2012 13:53:13 +0100 Subject: [PATCH] sudo: store rules with no sudoHost attribute
https://fedorahosted.org/sssd/ticket/1640 --- src/providers/ldap/sdap_sudo.c | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/src/providers/ldap/sdap_sudo.c b/src/providers/ldap/sdap_sudo.c index ebbc95d14bfa2603806a4f42048723b3d036de2a..636eae41bdf5ff7fc8555b7b58c2a26e99e7ba73 100644 --- a/src/providers/ldap/sdap_sudo.c +++ b/src/providers/ldap/sdap_sudo.c @@ -327,6 +327,13 @@ static char *sdap_sudo_build_host_filter(TALLOC_CTX *mem_ctx, goto done; } + /* sudoHost is not specified */ + filter = talloc_asprintf_append_buffer(filter, "(!(%s=*))", + map[SDAP_AT_SUDO_HOST].name); + if (filter == NULL) { + goto done; + } + /* ALL */ filter = talloc_asprintf_append_buffer(filter, "(%s=ALL)", map[SDAP_AT_SUDO_HOST].name); -- 1.7.11.7
_______________________________________________ sssd-devel mailing list sssd-devel@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/sssd-devel