#2482 Sudo commands are case-insensitive
Closed: Fixed None Opened 12 years ago by pviktori.

    $ ipa sudocmd-add /usr/bin/X
    -------------------------------
    Added Sudo Command "/usr/bin/X"
    -------------------------------
      Sudo Command: /usr/bin/X

    $ ipa sudocmd-show /usr/bin/x
      Sudo Command: /usr/bin/X

    pviktori@vm-140:~/freeipa$ ipa sudocmd-add /usr/bin/x
    ipa: ERROR: sudo command with name "/usr/bin/x" already exists

    $ ipa sudocmdgroup-add group1 --desc=blabla
    ---------------------------------
    Added Sudo Command Group "group1"
    ---------------------------------
      Sudo Command Group: group1
      Description: blabla

    $ ipa sudocmdgroup-add-member group1 --sudocmds=/usr/bin/X
      Sudo Command Group: group1
      Description: blabla
      Member Sudo commands: /usr/bin/x
    -------------------------
    Number of members added 1
    -------------------------

    $ ipa sudocmd-del /usr/bin/x
    ---------------------------------
    Deleted Sudo Command "/usr/bin/x"
    ---------------------------------

    $ ipa sudocmdgroup-show group1
      Sudo Command Group: group1
      Description: blabla

Moving to next month iteration.

Scope to big to fix at last minute, moving to backlog.

This could have potential upgrade problems as users could have sudo command entries with two dn formats.

Changing 3.2 priority

master:[[BR]]
981c9f1 Update sudocmd ACIs to use targetfilter[[BR]]
a694e61 Prevent a sudo command from being deleted if it is a member of a sudo rule[[BR]]
d668984 Use ipauniqueid for the RDN of sudo commands

ipa-3-1:[[BR]]
344feaa Update sudocmd ACIs to use targetfilter[[BR]]
de776e9 Prevent a sudo command from being deleted if it is a member of a sudo rule[[BR]]
c03aa63 Use ipauniqueid for the RDN of sudo commands

Metadata Update from @pviktori:
- Issue assigned to pviktori
- Issue set to the milestone: FreeIPA 3.2 - 2013/02

7 years ago

Login to comment on this ticket.

Metadata