summaryrefslogtreecommitdiffstats
path: root/install/share
diff options
context:
space:
mode:
authorJr Aquino <jr.aquino@citrix.com>2011-01-11 07:32:55 -0800
committerRob Crittenden <rcritten@redhat.com>2011-01-12 11:43:05 -0500
commit5a0c9371cba9725a5daca26a0a4c5053c5964921 (patch)
tree01567570b3060347e0e6bc7df693a821236b873e /install/share
parenteba72c85e8ebd9b7927194d7d4ad0dab559b3fb9 (diff)
downloadfreeipa-5a0c9371cba9725a5daca26a0a4c5053c5964921.tar.gz
freeipa-5a0c9371cba9725a5daca26a0a4c5053c5964921.tar.xz
freeipa-5a0c9371cba9725a5daca26a0a4c5053c5964921.zip
Bugfix for sudo compat cmdcat and deny commands https://fedorahosted.org/freeipa/ticket/742
Diffstat (limited to 'install/share')
-rw-r--r--install/share/schema_compat.uldif4
1 files changed, 2 insertions, 2 deletions
diff --git a/install/share/schema_compat.uldif b/install/share/schema_compat.uldif
index 6f70c1de..b7ee05fa 100644
--- a/install/share/schema_compat.uldif
+++ b/install/share/schema_compat.uldif
@@ -83,8 +83,8 @@ add:schema-compat-entry-attribute: 'sudoHost=%ifeq("hostCategory","all","ALL","+
add:schema-compat-entry-attribute: 'sudoHost=%ifeq("hostCategory","all","ALL","+%deref_f(\"memberHost\",\"(objectclass=ipaNisNetgroup)\",\"cn\")")'
add:schema-compat-entry-attribute: 'sudoCommand=%ifeq("cmdCategory","all","ALL","%deref(\"memberAllowCmd\",\"sudoCmd\")")'
add:schema-compat-entry-attribute: 'sudoCommand=%ifeq("cmdCategory","all","ALL","%deref_r(\"memberAllowCmd\",\"member\",\"sudoCmd\")")'
-add:schema-compat-entry-attribute: 'sudoCommand=%ifeq("cmdCategory","all","ALL","!%deref(\"memberDenyCmd\",\"sudoCmd\")")'
-add:schema-compat-entry-attribute: 'sudoCommand=%ifeq("cmdCategory","all","ALL","!%deref_r(\"memberDenyCmd\",\"member\",\"sudoCmd\")")'
+add:schema-compat-entry-attribute: 'sudoCommand=!%deref("memberDenyCmd","sudoCmd")'
+add:schema-compat-entry-attribute: 'sudoCommand=!%deref_r("memberDenyCmd","member","sudoCmd")'
add:schema-compat-entry-attribute: 'sudoRunAsUser=%{ipaSudoRunAsExtUser}'
add:schema-compat-entry-attribute: 'sudoRunAsUser=%deref("ipaSudoRunAs","uid")'
add:schema-compat-entry-attribute: 'sudoRunAsUser=%ifeq("ipaSudoRunAsUserCategory","all","ALL","%%%deref_f(\"ipaSudoRunAs\",\"(objectclass=posixGroup)\",\"cn\")")'