diff options
| author | Pavel Březina <pbrezina@redhat.com> | 2015-07-29 14:51:30 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2015-08-14 22:47:45 +0200 |
| commit | 52e3ee5c5ff2c5a4341041826a803ad42d2b2de7 (patch) | |
| tree | 643f0c422bf83050e3cff3131961c9569f4d19b0 /src/config/etc | |
| parent | ef7de95fc4827a660254a942fa394f34ed9694a9 (diff) | |
| download | sssd-52e3ee5c5ff2c5a4341041826a803ad42d2b2de7.tar.gz sssd-52e3ee5c5ff2c5a4341041826a803ad42d2b2de7.tar.xz sssd-52e3ee5c5ff2c5a4341041826a803ad42d2b2de7.zip | |
sudo: use "higher value wins" when ordering rules
This commit changes the default ordering logic (lower value wins) to
a correct one that is used by native ldap support. It also adds a new
option sudo_inverse_order to switch to the original SSSD (incorrect)
behaviour if needed.
Resolves:
https://fedorahosted.org/sssd/ticket/2682
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
Diffstat (limited to 'src/config/etc')
| -rw-r--r-- | src/config/etc/sssd.api.conf | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/config/etc/sssd.api.conf b/src/config/etc/sssd.api.conf index cf6ce6301..2e5b02e3e 100644 --- a/src/config/etc/sssd.api.conf +++ b/src/config/etc/sssd.api.conf @@ -63,6 +63,7 @@ pam_account_expired_message = str, None, false [sudo] # sudo service sudo_timed = bool, None, false +sudo_inverse_order = bool, None, false [autofs] # autofs service |