Bug 811

Summary:	Lack of documentation for Defaults associated to a User_Alias or a Cmnd_Alias
Product:	Sudo	Reporter:	Daniele Palumbo <daniele>
Component:	Sudo	Assignee:	Todd C. Miller <Todd.Miller>
Status:	RESOLVED FIXED
Severity:	enhancement	CC:	daniele
Priority:	low
Version:	1.8.21
Hardware:	All
OS:	All
See Also:	https://bugzilla.sudo.ws/show_bug.cgi?id=810

Description Daniele Palumbo 2017-12-06 16:31:20 MST

Current LDAP documentation 
https://www.sudo.ws/man/1.8.21/sudoers.ldap.man.html
lack of documentation for Defaults associated to a User_Alias or a Cmnd_Alias

Examples are taken from
https://www.sudo.ws/man/1.8.21/sudoers.man.html#EXAMPLES 
for consistency.

User_Alias Defaults:
"Defaults:millert	!authenticate" 

Can be translated in
# millert, SUDOers, courtesan.com
dn: cn=millert,ou=SUDOers,dc=courtesan,dc=com
objectClass: top
objectClass: sudoRole
cn: millert
sudoUser: millert
sudoRunAsUser: ALL
sudoRunAsGroup: ALL
sudoHost: ALL
sudoOption: !authenticate

Cmnd_Alias Default:
"Cmnd_Alias	PAGERS = /usr/bin/more, /usr/bin/pg, /usr/bin/less
Defaults!PAGERS		noexec"

Cannot be currently translated.

Documentation should be fixed in order to show up what can be accomplished and what can not.

Comment 1 Todd C. Miller 2018-03-30 07:02:38 MDT

In sudo 1.8,23 the sudoers.ldap manual will include a section on converting from file-based sudoers to LDAP-based which should address this.

Comment 2 Todd C. Miller 2018-05-01 10:20:10 MDT

Sudo 1.8.23 has a "Converting between file-based and LDAP sudoers" sub-section in the sudoers.ldap manual.