Re: LDAP SudoOrder max value

"Todd C. Miller" <[email protected]> Tue, 17 Oct 2017 12:55:41 -0600
Newsgroups gmane.comp.tools.sudo.devel
Message-ID <[email protected]>
On Tue, 17 Oct 2017 14:54:49 +0200, Daniele Palumbo wrote:

> I am seeking the maximum value that a sudoOrder option defined in LDAP may ta
> ke.
> 
> From LDAP definition, seems that there are no limit [2,3].
> 
> From sudo ldap.c[1] seems to be a signed double (that on some implementation 
> is in example 1.79769^308).
> 
> May you please confirm that signed double is the maximum value that
> sudoOrder may take, if not limited by LDAP itself?

You are correct, the order is stored as a signed double.  The maximum
value will be machine-dependent but is typically about 1.79769^308
on machines with IEEE floating point, which is practically all
modern machines.

 - todd
____________________________________________________________
sudo-workers mailing list <[email protected]>
For list information, options, or to unsubscribe, visit:
https://www.sudo.ws/mailman/listinfo/sudo-workers