Empty SUDOERS_SEARCH_FILTER bug

Hello,

  the sudoers.ldap(5) manual page states that you can use the 
`SUDOERS_SEARCH_FILTER ldap_filter` option

and omit the ldap_filter value so that no filter will be used. However, 
when you try to do that, it seems that

sudo then passes an invalid filter expression to the LDAP API:


---snip---

sudo: ldap search '(sudoUser=*)(sudoUser=+*)'
sudo: searching from base 'ou=SUDOers,dc=localhost,dc=localdomain'
sudo: ldap search pass 2 failed: Bad search filter

---snip---


One can use `SUDOERS_SEARCH_FILTER (objectClass=*)` to workaround this.


Regards,

Daniel

____________________________________________________________
sudo-workers mailing list <[email protected]>
For list information, options, or to unsubscribe, visit:
https://www.sudo.ws/mailman/listinfo/sudo-workers