URL:
https://github.com/SSSD/sssd/pull/39
Title: #39: RESPONDER: Enable sudoRule in case insen. domains (1.13)
celestian commented:
"""
I am sure this is enough. Maybe it is not the most direct solution. I try to explain it:
We have user ```Administrator```, sysdb record looks like (minor items missed):
```
dn: name=Administrator,cn=users,cn=scorpion.domain,cn=sysdb
fullName: Administrator
gecos: Administrator
gidNumber: 342400513
name: Administrator
objectClass: user
uidNumber: 342400500
objectSIDString: S-1-5-21-2022941956-2492201804-3493196904-500
uniqueID: c153af46-809a-41a0-baa6-de76b587e061
originalDN: CN=Administrator,CN=Users,DC=scorpion,DC=domain
entryUSN: 69662
nameAlias: administrator
```
And we have ```lessrule```:
```
dn: name=lessrule,cn=sudorules,cn=custom,cn=scorpion.domain,cn=sysdb
cn: lessrule
dataExpireTimestamp: 1478853348
entryUSN: 45204
name: lessrule
objectClass: sudoRule
originalDN: CN=lessrule,OU=sudoers,DC=scorpion,DC=domain
sudoCommand: /usr/bin/less
sudoHost: ALL
sudoUser: Administrator
sudoUser: administrator
distinguishedName: name=lessrule,cn=sudorules,cn=custom,cn=scorpion.domain,cn=
sysdb
```
If we look at ```/var/log/secure```:
```
Nov 11 08:02:59 client sudo: pam_sss(sudo:auth): authentication success;
logname=administrator uid=342400500 euid=0 tty=/dev/pts/2 ruser=administrator rhost=
user=administrator
Nov 11 08:02:59 client sudo: administrator : TTY=pts/2 ;
PWD=/home/administrator(a)scorpion.domain ; USER=root ; COMMAND=/bin/less /etc/resolv.conf
Nov 11 08:02:59 client sudo: pam_systemd(sudo:session): Cannot create session: Already
running in a session
Nov 11 08:02:59 client sudo: pam_unix(sudo:session): session opened for user root by
administrator(uid=0)
```
I understand that it is searched by the correct name, but sudo finally accepts a name with
lowercase letters. If I remove lowercase name from ```sudoRule``` it doesn't work
anymore. I wonder if it is a way to make sudo to work with original login name.
"""
See the full comment at
https://github.com/SSSD/sssd/pull/39#issuecomment-259897355