<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
On 07/14/2011 05:36 PM, Sigbjorn Lie wrote:
<blockquote cite="mid:4E1F6150.5050404@nixtra.com" type="cite">
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
<title></title>
Hi,<br>
<br>
From:
<a moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://docs.fedoraproject.org/en-US/Fedora/15/html/FreeIPA_Guide/sudo.html">http://docs.fedoraproject.org/en-US/Fedora/15/html/FreeIPA_Guide/sudo.html</a><br>
<br>
<h5 class="formalpara">Compatibility Translation for Native Sudo</h5>
The native <code class="command">sudo</code> binary does not yet
support SSSD or the IPA Sudo Schema. As an interim solution, IPA
has implemented a compatibility plug-in which transparently
translates IPA Sudo rules into those supported by the current <code
class="command">sudo</code> binary. <br>
<br>
<br>
<br>
<br>
What is advantages of the IPA Sudo Schema compared to the LDAP
Schema currently supported by sudo?<br>
</blockquote>
<br>
<a class="moz-txt-link-freetext" href="http://www.freeipa.org/page/SUDO_Schema_Design">http://www.freeipa.org/page/SUDO_Schema_Design</a><br>
<br>
In summary: better referential integrity and better command
grouping.<br>
Nothing drastic in terms of the core SUDO logic just a cleaner way
to reference other objects that are already available in IPA: users,
user groups, hosts, host groups etc.<br>
<br>
<blockquote cite="mid:4E1F6150.5050404@nixtra.com" type="cite"> <br>
<br>
<br>
Regards,<br>
Siggi<br>
<br>
<br>
On 07/14/2011 11:11 PM, Deon Lackey wrote:
<blockquote
cite="mid:1075692736.411296.1310677872701.JavaMail.root@zmail02.collab.prod.int.phx2.redhat.com"
type="cite">
<style type="text/css">p { margin: 0; }</style>
<div style="font-family: Arial; font-size: 10pt; color: rgb(0,
0, 0);">
<p>Hey, guys.</p>
<p> </p>
<p>I have created a handful of doc tickets related to issues
that have cropped up on the mailing list over the past
couple of months. </p>
<p> </p>
<p>Trac ticket report:</p>
<p><a moz-do-not-send="true"
href="https://fedorahosted.org/freeipa-guide/report/3">https://fedorahosted.org/freeipa-guide/report/3</a></p>
<p> </p>
<p>This is for the freeipa-guide trac instance, not the
freeipa trac instance. The freeipa instance is, of course,
the real place to go for product tickets 'n' stuff. </p>
<p> </p>
<p>Anyway, if I missed anything that any of you think is
important, let me know.</p>
<p><a moz-do-not-send="true"
href="https://fedorahosted.org/freeipa-guide/wiki/CommunityDocIssues">https://fedorahosted.org/freeipa-guide/wiki/CommunityDocIssues</a></p>
<p> </p>
<p>Thanks!</p>
<p>Deon</p>
</div>
<pre wrap=""><fieldset class="mimeAttachmentHeader"></fieldset>
_______________________________________________
Freeipa-users mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
_______________________________________________
Freeipa-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IPA project,
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
<a class="moz-txt-link-abbreviated" href="http://www.redhat.com/carveoutcosts/">www.redhat.com/carveoutcosts/</a>
</pre>
</body>
</html>