Bug 711667
| Summary: | Comma separated values for --runasexternaluser option in sudorule-mod are accepted as a single value. | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 6 | Reporter: | Gowrishankar Rajaiyan <grajaiya> |
| Component: | ipa | Assignee: | Rob Crittenden <rcritten> |
| Status: | CLOSED ERRATA | QA Contact: | Chandrasekar Kannan <ckannan> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 6.2 | CC: | benl, dpal, jgalipea, mkosek |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | ipa-2.1.0-1.el6 | Doc Type: | Bug Fix |
| Doc Text: |
Cause: Comma-separated values are not handled properly when using sudorule-mod to manage runasexternaluser and runasexternalgroup
Consequence: The wrong values are being stored in the entry.
Fix: These options have been removed from the sudorule-mod command. Use sudorule-add-runasuser and sudurole-runasgroup instead.
Result: --runasexternaluser and --runasexternalgroup have been deprecated.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2011-12-06 18:33:17 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Gowrishankar Rajaiyan
2011-06-08 06:05:12 UTC
Fixed upstream: master: https://fedorahosted.org/freeipa/changeset/d8c479731e6f985f4c4be1e1e4fee858e9eae901
Technical note added. If any revisions are required, please edit the "Technical Notes" field
accordingly. All revisions will be proofread by the Engineering Content Services team.
New Contents:
Cause: Comma-separated values are not handled properly when using sudorule-mod to manage runasexternaluser and runasexternalgroup
Consequence: The wrong values are being stored in the entry.
Fix: These options have been removed from the sudorule-mod command. Use sudorule-add-runasuser and sudurole-runasgroup instead.
Result: --runasexternaluser and --runasexternalgroup have been deprecated.
[root@jetfire ~]# ipa sudorule-add shanks-rule1 ------------------------------ Added Sudo Rule "shanks-rule1" ------------------------------ Rule name: shanks-rule1 Enabled: TRUE [root@jetfire ~]# [root@jetfire ~]# ipa sudorule-add-runasuser shanks-rule1 --users=test1,test2,test3,test4 Rule name: shanks-rule1 Enabled: TRUE RunAs External User: test1, test2, test3, test4 ------------------------- Number of members added 4 ------------------------- [root@jetfire ~]# [root@jetfire ~]# [root@jetfire ~]# ipa sudorule-find shanks-rule1 --all --raw ------------------- 1 Sudo Rule matched ------------------- dn: ipauniqueid=3d3cd0e0-051a-11e1-9bb5-525400a8b669,cn=sudorules,cn=sudo,dc=testrelm cn: shanks-rule1 ipaenabledflag: TRUE ipasudorunasextuser: test1 ipasudorunasextuser: test3 ipasudorunasextuser: test2 ipasudorunasextuser: test4 ipauniqueid: 3d3cd0e0-051a-11e1-9bb5-525400a8b669 objectclass: ipaassociation objectclass: ipasudorule ---------------------------- Number of entries returned 1 ---------------------------- [root@jetfire ~]# [root@jetfire ~]# [root@jetfire ~]# ipa sudorule-mod shanks-rule1 --runasexternaluser=user1,user2,user3,user4 ipa: ERROR: invalid 'runasexternaluser': this option has been deprecated. [root@jetfire ~]# Verified. Version: ipa-server-2.1.3-7.el6.x86_64 Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHSA-2011-1533.html |