summaryrefslogtreecommitdiffstats
path: root/install
diff options
context:
space:
mode:
authorJr Aquino <jr.aquino@citrix.com>2011-01-07 15:29:00 -0800
committerRob Crittenden <rcritten@redhat.com>2011-01-12 11:40:47 -0500
commit1ea31a0cff783a4d0c76089c8bbe98137ae3288e (patch)
tree82766ecb544e403dba631fbb1042890931bca873 /install
parent974287895ec5dbb377a65a83c050f088df79ffb7 (diff)
downloadfreeipa-1ea31a0cff783a4d0c76089c8bbe98137ae3288e.tar.gz
freeipa-1ea31a0cff783a4d0c76089c8bbe98137ae3288e.tar.xz
freeipa-1ea31a0cff783a4d0c76089c8bbe98137ae3288e.zip
fix sudorule runas user/groups https://fedorahosted.org/freeipa/ticket/570
Diffstat (limited to 'install')
-rw-r--r--install/share/schema_compat.uldif1
1 files changed, 1 insertions, 0 deletions
diff --git a/install/share/schema_compat.uldif b/install/share/schema_compat.uldif
index bfe645dc5..6f70c1de4 100644
--- a/install/share/schema_compat.uldif
+++ b/install/share/schema_compat.uldif
@@ -87,6 +87,7 @@ add:schema-compat-entry-attribute: 'sudoCommand=%ifeq("cmdCategory","all","ALL",
add:schema-compat-entry-attribute: 'sudoCommand=%ifeq("cmdCategory","all","ALL","!%deref_r(\"memberDenyCmd\",\"member\",\"sudoCmd\")")'
add:schema-compat-entry-attribute: 'sudoRunAsUser=%{ipaSudoRunAsExtUser}'
add:schema-compat-entry-attribute: 'sudoRunAsUser=%deref("ipaSudoRunAs","uid")'
+add:schema-compat-entry-attribute: 'sudoRunAsUser=%ifeq("ipaSudoRunAsUserCategory","all","ALL","%%%deref_f(\"ipaSudoRunAs\",\"(objectclass=posixGroup)\",\"cn\")")'
add:schema-compat-entry-attribute: 'sudoRunAsGroup=%{ipaSudoRunAsExtGroup}'
add:schema-compat-entry-attribute: 'sudoRunAsGroup=%deref("ipaSudoRunAs","cn")'
add:schema-compat-entry-attribute: 'sudoOption=%{ipaSudoOpt}'