From af9f9052393697383c79576490127a4426452ba8 Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Wed, 23 Feb 2011 17:10:08 -0500 Subject: Collect memberof information for sudo commands. We weren't searching the cn=sudo container so all members of a sudocmdgroup looked indirect. Add a label for sudo command groups. Update the tests to include verifying that membership is done properly. ticket 1003 --- ipaserver/plugins/ldap2.py | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'ipaserver/plugins/ldap2.py') diff --git a/ipaserver/plugins/ldap2.py b/ipaserver/plugins/ldap2.py index d1e31f5e..568792d1 100644 --- a/ipaserver/plugins/ldap2.py +++ b/ipaserver/plugins/ldap2.py @@ -1002,6 +1002,14 @@ class ldap2(CrudBackend, Encoder): except errors.NotFound: pbacresults = [] results = results + pbacresults + try: + (sudoresults, truncated) = self.find_entries(searchfilter, + attr_list, 'cn=sudo,%s' % api.env.basedn, + time_limit=time_limit, size_limit=size_limit, + normalize=normalize) + except errors.NotFound: + sudoresults = [] + results = results + sudoresults direct = [] indirect = [] -- cgit