URL:
https://github.com/SSSD/sssd/pull/39
Title: #39: RESPONDER: Enable sudoRule in case insen. domains (1.13)
celestian commented:
"""
We discussed this issue with @jhrozek.
I misunderstood the case -- the right is -- user is ```Administrator```, the sudoRule is
written for user ```administrator``` on case insensitive domain (typically AD).
Now we can see in logs proper filter:
```
[sudosrv_get_sudorules_query_cache] (0x0200): Searching sysdb with
[(&(objectClass=sudoRule)(|(sudoUser=ALL)(sudoUser=Administrator)(sudoUser=administrator)...
```
And the sudoRule is:
```
dn: name=lessrule,cn=sudorules,cn=custom,cn=scorpion.domain,cn=sysdb
cn: lessrule
dataExpireTimestamp: 1479136324
entryUSN: 90154
name: lessrule
objectClass: sudoRule
originalDN: CN=lessrule,OU=sudoers,DC=scorpion,DC=domain
sudoCommand: /usr/bin/less
sudoHost: ALL
sudoUser: administrator
distinguishedName: name=lessrule,cn=sudorules,cn=custom,cn=scorpion.domain,cn=
sysdb
```
I slightly changed the patch, new version is pushed.
"""
See the full comment at
https://github.com/SSSD/sssd/pull/39#issuecomment-260339114