Rafael Guterres Jeffman 22f31d02f2 sudorule: Fix runas with external users and groups. ...

When setting 'runasuser' or 'runasgroup' for a sudorule, either IPA or
external users and groups can be used, but only IPA users and groups
were being searched for when modifying the attributes, making this task
not idempotent if an external group or user was used..

This patch fixes this issue by comparing users and groups to the IPA
and external setting.

The IPA CLI commands are slightly confusing, as the sudorule-add and
sudorule-mod display separate options for internal and external users
and groups, but these options are deprecated and do not work anymore,
in favor of sudorule-add-runasuser and sudorule-add-runasgroup, which
don't diferentiate between internal and external users, from the CLI
user perspective.

2021-11-03 15:49:09 -03:00

..

doc_fragments

IPAAnsibleModule: add support for ldap_cache configuration.

2021-10-01 11:01:03 -03:00

module_utils

Merge pull request #652 from rjeffman/ipaansiblemodule_fail_if_invalid

2021-10-04 16:37:04 +02:00

modules

sudorule: Fix runas with external users and groups.

2021-11-03 15:49:09 -03:00