mirror of https://github.com/sudo-project/sudo.git
75 lines
1.5 KiB
Bash
Executable File
75 lines
1.5 KiB
Bash
Executable File
#!/bin/sh
|
|
#
|
|
# Test LDAP sudoOrder when converting to sudoers.
|
|
#
|
|
|
|
: ${CVTSUDOERS=cvtsudoers}
|
|
|
|
$CVTSUDOERS -c "" -i ldif -b "ou=SUDOers,dc=sudo,dc=ws" -f sudoers <<EOF
|
|
dn: dc=sudo,dc=ws
|
|
objectClass: dcObject
|
|
objectClass: organization
|
|
dc: courtesan
|
|
o: Sudo World Headquarters
|
|
description: Sudo World Headquarters
|
|
|
|
# Organizational Role for Directory Manager
|
|
dn: cn=Manager,dc=sudo,dc=ws
|
|
objectClass: organizationalRole
|
|
cn: Manager
|
|
description: Directory Manager
|
|
|
|
# SUDOers, sudo.ws
|
|
dn: ou=SUDOers,dc=sudo,dc=ws
|
|
objectClass: top
|
|
objectClass: organizationalUnit
|
|
description: SUDO Configuration Subtree
|
|
ou: SUDOers
|
|
|
|
# defaults, SUDOers, sudo.ws
|
|
dn: cn=defaults,ou=SUDOers,dc=sudo,dc=ws
|
|
objectClass: top
|
|
objectClass: sudoRole
|
|
cn: defaults
|
|
description: Default sudoOption's go here
|
|
sudoOption: log_output
|
|
|
|
# root, SUDOers, sudo.ws
|
|
dn: cn=root,ou=SUDOers,dc=sudo,dc=ws
|
|
objectClass: top
|
|
objectClass: sudoRole
|
|
cn: root
|
|
sudoUser: root
|
|
sudoRunAsUser: ALL
|
|
sudoRunAsGroup: ALL
|
|
sudoHost: ALL
|
|
sudoCommand: ALL
|
|
sudoOption: !authenticate
|
|
sudoOrder: 10
|
|
|
|
# %wheel, SUDOers, sudo.ws
|
|
dn: cn=%wheel,ou=SUDOers,dc=sudo,dc=ws
|
|
objectClass: top
|
|
objectClass: sudoRole
|
|
cn: %wheel
|
|
sudoUser: %wheel
|
|
sudoRunAsUser: ALL
|
|
sudoRunAsGroup: ALL
|
|
sudoHost: +sudo-hosts
|
|
sudoCommand: ALL
|
|
sudoOption: !authenticate
|
|
sudoOrder: 20
|
|
|
|
# millert, SUDOers, sudo.ws
|
|
dn: cn=millert,ou=SUDOers,dc=sudo,dc=ws
|
|
objectClass: top
|
|
objectClass: sudoRole
|
|
cn: millert
|
|
sudoUser: millert
|
|
sudoRunAsUser: ALL
|
|
sudoRunAsGroup: ALL
|
|
sudoHost: ALL
|
|
sudoCommand: ALL
|
|
sudoOrder: 5
|
|
EOF
|