The group in which a SUDO command is a direct member appears in the memberofindirect instead of memberof attribute of the command.
Steps to reproduce:[[BR]] 1. Add a SUDO command directly into a SUDO command group:
ipa sudocmdgroup-add-member testgroup --sudocmds=testcmd
View SUDO command's info:
ipa sudocmd-show testcmd --all
Actual result:[[BR]] The output of step #2 shows that the testgroup is listed in the memberofindirect attribute.
Expected result:[[BR]] The testgroup should appear in the memberof attribute.
Note:[[BR]] Nested membership is working correctly. Try adding the testgroup into another group:
ipa sudocmdgroup-add-member parentgroup --sudocmdgroups=testgroup
The parentgroup is listed correctly in the memberofindirect of testcmd.
attachment freeipa-rcrit-741-sudocmd.patch
master: af9f905
Metadata Update from @edewata: - Issue assigned to rcritten - Issue set to the milestone: FreeIPA 2.0.2 RC2 (bug fixing)
Login to comment on this ticket.