Bug 215 – request for ordering constraints with LDAP

Bug 215 - request for ordering constraints with LDAP


Summary:	request for ordering constraints with LDAP

Status:	RESOLVED FIXED

Product:	Sudo
Classification:	Unclassified
Component:	Sudo
Version:	1.6.8
Hardware:	PC Linux

Importance:	normal enhancement
Assigned To:	Todd C. Miller

URL:	http://bugs.debian.org/373674

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2006-06-14 21:10 MDT by Bdale Garbee
Modified:	2011-03-03 09:58 MST (History)
CC List:	0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Bdale Garbee 2006-06-14 21:10:55 MDT

One of the users of my Debian packaging of sudo has pointed out that the version
built with LDAP support violates the principle of least astonishment by failing
to preserve the normal sudoers ordering constraints because the LDAP results are
not ordered.  He suggests ways the behavior could be improved to restore the
behavior provided by the non-LDAP version.  Seems like a good idea to me, but
beyond the scope of the Debian packaging.  The complete original email is bug
373674 in the Debian bug tracking system.

Comment 1 Todd C. Miller 2007-07-05 17:09:25 MDT

Link to debian bug tracker http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=373674

Comment 2 Todd C. Miller 2011-03-03 09:58:09 MST

Sudo 1.7.5 and 1.8.0 LDAP support includes a sudoOrder attribute that can be used to preserve sudoers file ordering constraints.