fix location of NOPASSWD entry in default config file for the sudo-ldap

case too, closes: #479616

diff --git a/debian/changelog b/debian/changelog
index 1e715a0749ccb9329bdaa80f11af28e2df3e5965..b30bcd1498155d4a5d91d37feb15e2e402f04e32 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -4,6 +4,8 @@ sudo (1.7.0-1) UNRELEASED; urgency=low
   * fix ldap config file path for sudo-ldap package, including creating
     a symlink in postinst and cleaning it up in postrm for the sudo-ldap
     package, closes: #430826
+  * fix NOPASSWD entry location in default config file for the sudo-ldap
+    instance too, closes: #479616
 
  -- Bdale Garbee <bdale@gag.com>  Sat, 28 Mar 2009 06:37:55 -0600
 

diff --git a/debian/sudo-ldap.postinst b/debian/sudo-ldap.postinst
index 89cc56ca1a549d3eca7e9549473079bbc800e564..b89a8a533ec651bb3797882bd6738aeef8c7c418 100644 (file)
--- a/debian/sudo-ldap.postinst
+++ b/debian/sudo-ldap.postinst
@@ -16,12 +16,14 @@ if ( ! -f "/etc/sudoers") {
          "#\n",
          "# See the man page for details on how to write a sudoers file.\n",
          "#\n\nDefaults\tenv_reset\n\n",
-         "# Uncomment to allow members of group sudo to not need a password\n",
-         "# %sudo ALL=NOPASSWD: ALL\n\n",
          "# Host alias specification\n\n",
          "# User alias specification\n\n",
          "# Cmnd alias specification\n\n",
-         "# User privilege specification\nroot\tALL=(ALL) ALL\n";
+         "# User privilege specification\nroot\tALL=(ALL) ALL\n\n",
+         "# Uncomment to allow members of group sudo to not need a password\n",
+         "# (Note that later entries override this, so you might need to move\n",
+          "# it further down)\n",
+         "# %sudo ALL=NOPASSWD: ALL\n";
        close SUDOERS;
 
 }