diff options
| author | Jr Aquino <jr.aquino@citrix.com> | 2011-01-11 07:32:55 -0800 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2011-01-12 11:43:05 -0500 |
| commit | 5a0c9371cba9725a5daca26a0a4c5053c5964921 (patch) | |
| tree | 01567570b3060347e0e6bc7df693a821236b873e /install/share | |
| parent | eba72c85e8ebd9b7927194d7d4ad0dab559b3fb9 (diff) | |
| download | freeipa-5a0c9371cba9725a5daca26a0a4c5053c5964921.tar.gz freeipa-5a0c9371cba9725a5daca26a0a4c5053c5964921.tar.xz freeipa-5a0c9371cba9725a5daca26a0a4c5053c5964921.zip | |
Bugfix for sudo compat cmdcat and deny commands https://fedorahosted.org/freeipa/ticket/742
Diffstat (limited to 'install/share')
| -rw-r--r-- | install/share/schema_compat.uldif | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/install/share/schema_compat.uldif b/install/share/schema_compat.uldif index 6f70c1de4..b7ee05fa0 100644 --- a/install/share/schema_compat.uldif +++ b/install/share/schema_compat.uldif @@ -83,8 +83,8 @@ add:schema-compat-entry-attribute: 'sudoHost=%ifeq("hostCategory","all","ALL","+ add:schema-compat-entry-attribute: 'sudoHost=%ifeq("hostCategory","all","ALL","+%deref_f(\"memberHost\",\"(objectclass=ipaNisNetgroup)\",\"cn\")")' add:schema-compat-entry-attribute: 'sudoCommand=%ifeq("cmdCategory","all","ALL","%deref(\"memberAllowCmd\",\"sudoCmd\")")' add:schema-compat-entry-attribute: 'sudoCommand=%ifeq("cmdCategory","all","ALL","%deref_r(\"memberAllowCmd\",\"member\",\"sudoCmd\")")' -add:schema-compat-entry-attribute: 'sudoCommand=%ifeq("cmdCategory","all","ALL","!%deref(\"memberDenyCmd\",\"sudoCmd\")")' -add:schema-compat-entry-attribute: 'sudoCommand=%ifeq("cmdCategory","all","ALL","!%deref_r(\"memberDenyCmd\",\"member\",\"sudoCmd\")")' +add:schema-compat-entry-attribute: 'sudoCommand=!%deref("memberDenyCmd","sudoCmd")' +add:schema-compat-entry-attribute: 'sudoCommand=!%deref_r("memberDenyCmd","member","sudoCmd")' add:schema-compat-entry-attribute: 'sudoRunAsUser=%{ipaSudoRunAsExtUser}' add:schema-compat-entry-attribute: 'sudoRunAsUser=%deref("ipaSudoRunAs","uid")' add:schema-compat-entry-attribute: 'sudoRunAsUser=%ifeq("ipaSudoRunAsUserCategory","all","ALL","%%%deref_f(\"ipaSudoRunAs\",\"(objectclass=posixGroup)\",\"cn\")")' |