From 006d178c70e0469061068e607f20446f7995f773 Mon Sep 17 00:00:00 2001
From: Pavel Březina <pbrezina@redhat.com>
Date: Fri, 26 Jul 2013 12:29:37 +0200
Subject: sudo: print better debug message when a rule has multiple cn values

---
 src/providers/ldap/sdap_sudo_cache.c | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/providers/ldap/sdap_sudo_cache.c b/src/providers/ldap/sdap_sudo_cache.c
index db51d1c37..50bb0bd52 100644
--- a/src/providers/ldap/sdap_sudo_cache.c
+++ b/src/providers/ldap/sdap_sudo_cache.c
@@ -69,7 +69,11 @@ sdap_save_native_sudorule(TALLOC_CTX *mem_ctx,
 
     ret = sysdb_attrs_get_string(attrs, map[SDAP_AT_SUDO_NAME].sys_name,
                                  &rule_name);
-    if (ret != EOK) {
+    if (ret == ERANGE) {
+        DEBUG(SSSDBG_OP_FAILURE, ("Warning: found rule that contains none "
+              "or multiple CN values. It will be skipped.\n"));
+        return ret;
+    } else if (ret != EOK) {
         DEBUG(SSSDBG_OP_FAILURE, ("Could not get rule name [%d]: %s\n",
               ret, strerror(ret)));
         return ret;
-- 
cgit