isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Mention that match_group_by_gid has no effect when sudoers is stored

Browse Source 
in LDAP.
This commit is contained in:
Todd C. Miller
2016-08-31 12:29:54 -06:00
parent e147ba1fec
commit dba28a945c
3 changed files with 16 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
doc/sudoers.cat
View File

@@ -1149,7 +1149,9 @@ SSUUDDOOEERRSS OOPPTTIIOONNSS
_m_a_t_c_h___g_r_o_u_p___b_y___g_i_d flag to avoid resolving the user's
group IDs to group names and instead resolve all group
names listed in the _s_u_d_o_e_r_s file, matching by group ID
instead of by group name. This flag is _o_f_f by default.
instead of by group name. The _m_a_t_c_h___g_r_o_u_p___b_y___g_i_d flag
has no effect when _s_u_d_o_e_r_s data is stored in LDAP.
This flag is _o_f_f by default.
This setting is only supported by version 1.8.18 or
higher.
@@ -2590,4 +2592,4 @@ DDIISSCCLLAAIIMMEERR
file distributed with ssuuddoo or https://www.sudo.ws/license.html for
complete details.
Sudo 1.8.18 August 30, 2016 Sudo 1.8.18
Sudo 1.8.18 August 31, 2016 Sudo 1.8.18

7
doc/sudoers.man.in
View File

@@ -21,7 +21,7 @@
.\" Agency (DARPA) and Air Force Research Laboratory, Air Force
.\" Materiel Command, USAF, under agreement number F39502-99-1-0512.
.\"
.TH "SUDOERS" "5" "August 30, 2016" "Sudo @PACKAGE_VERSION@" "File Formats Manual"
.TH "SUDOERS" "5" "August 31, 2016" "Sudo @PACKAGE_VERSION@" "File Formats Manual"
.nh
.if n .ad l
.SH "NAME"
@@ -2436,6 +2436,11 @@ flag to avoid resolving the user's group IDs to group names and
instead resolve all group names listed in the
\fIsudoers\fR
file, matching by group ID instead of by group name.
The
\fImatch_group_by_gid\fR
flag has no effect when
\fIsudoers\fR
data is stored in LDAP.
This flag is
\fIoff\fR
by default.

7
doc/sudoers.mdoc.in
View File

@@ -19,7 +19,7 @@
.\" Agency (DARPA) and Air Force Research Laboratory, Air Force
.\" Materiel Command, USAF, under agreement number F39502-99-1-0512.
.\"
.Dd August 30, 2016
.Dd August 31, 2016
.Dt SUDOERS @mansectform@
.Os Sudo @PACKAGE_VERSION@
.Sh NAME
@@ -2282,6 +2282,11 @@ flag to avoid resolving the user's group IDs to group names and
instead resolve all group names listed in the
.Em sudoers
file, matching by group ID instead of by group name.
The
.Em match_group_by_gid
flag has no effect when
.Em sudoers
data is stored in LDAP.
This flag is
.Em off
by default.