FreeBSD Port: sudo-1.6.8.12_1

[Michael Haro]

This seems like something that would be useful (as an option to configure)
to sudo in general and not specific to FreeBSD.  Have you tried contacting
the sudo project?

Michael

On Fri, Jun 09, 2006 at 09:36:43AM +0100, Tom Judge wrote:
> Hi,
> 
> Sorry I forgot to attach the patch to the last email.
> 
> I have created a small patch for sudo that allows it to do an LDAP sub 
> tree search for the sudoers entries, which in turn allows you to 
> categorize sudo rights within the LDAP tree.  Would it be possible to 
> get this added to the sudo port?
> 
> Regards
> 
> Tom J
> 
> 

> --- ldap.c.orig	Fri Jun  9 09:14:24 2006
> +++ ldap.c	Fri Jun  9 09:17:55 2006
> @@ -833,7 +833,7 @@
>  
>    /* Parse Default Options */
>  
> -  rc=ldap_search_s(ld,ldap_conf.base,LDAP_SCOPE_ONELEVEL,
> +  rc=ldap_search_s(ld,ldap_conf.base,LDAP_SCOPE_SUBTREE,
>               "cn=defaults",NULL,0,&result);
>    if (!rc && (entry=ldap_first_entry(ld,result))){
>      if (ldap_conf.debug) printf("found:%s\n",ldap_get_dn(ld,entry));
> @@ -871,7 +871,7 @@
>        filt=strdup("sudoUser=+*");
>      }
>      if (ldap_conf.debug) printf("ldap search '%s'\n",filt);
> -    rc=ldap_search_s(ld,ldap_conf.base,LDAP_SCOPE_ONELEVEL,
> +    rc=ldap_search_s(ld,ldap_conf.base,LDAP_SCOPE_SUBTREE,
>                 filt,NULL,0,&result);
>      if (rc) {
>        if (ldap_conf.debug) printf("nothing found for '%s'\n",filt);