|
|
72fdaf |
diff -up sudo-1.8.6p7/plugins/sudoers/ldap.c.ldapsearchuidfix sudo-1.8.6p7/plugins/sudoers/ldap.c
|
|
|
72fdaf |
--- sudo-1.8.6p7/plugins/sudoers/ldap.c.ldapsearchuidfix 2015-07-07 15:02:41.504731613 +0200
|
|
|
72fdaf |
+++ sudo-1.8.6p7/plugins/sudoers/ldap.c 2015-07-07 15:07:57.991777302 +0200
|
|
|
72fdaf |
@@ -1211,8 +1211,8 @@ sudo_ldap_build_pass1(struct passwd *pw)
|
|
|
72fdaf |
if (ldap_conf.search_filter)
|
|
|
72fdaf |
sz += strlen(ldap_conf.search_filter);
|
|
|
72fdaf |
|
|
|
72fdaf |
- /* Then add (|(sudoUser=USERNAME)(sudoUser=ALL)) + NUL */
|
|
|
72fdaf |
- sz += 29 + sudo_ldap_value_len(pw->pw_name);
|
|
|
72fdaf |
+ /* Then add (|(sudoUser=USERNAME)(sudoUser=#uid)(sudoUser=ALL)) + NUL */
|
|
|
72fdaf |
+ sz += 29 + (12 + MAX_UID_T_LEN) + sudo_ldap_value_len(pw->pw_name);
|
|
|
72fdaf |
|
|
|
72fdaf |
/* Add space for primary and supplementary groups and gids */
|
|
|
72fdaf |
if ((grp = sudo_getgrgid(pw->pw_gid)) != NULL) {
|
|
|
72fdaf |
@@ -1253,6 +1253,12 @@ sudo_ldap_build_pass1(struct passwd *pw)
|
|
|
72fdaf |
(void) sudo_ldap_value_cat(buf, pw->pw_name, sz);
|
|
|
72fdaf |
(void) strlcat(buf, ")", sz);
|
|
|
72fdaf |
|
|
|
72fdaf |
+ /* Append user uid */
|
|
|
72fdaf |
+ (void) snprintf(gidbuf, sizeof(gidbuf), "%u", (unsigned int)pw->pw_uid);
|
|
|
72fdaf |
+ (void) strlcat(buf, "(sudoUser=#", sz);
|
|
|
72fdaf |
+ (void) strlcat(buf, gidbuf, sz);
|
|
|
72fdaf |
+ (void) strlcat(buf, ")", sz);
|
|
|
72fdaf |
+
|
|
|
72fdaf |
/* Append primary group and gid */
|
|
|
72fdaf |
if (grp != NULL) {
|
|
|
72fdaf |
(void) strlcat(buf, "(sudoUser=%", sz);
|