Imported Upstream version 1.8.2

[debian/sudo] / doc / sudoers.ldap.cat

diff --git a/doc/sudoers.ldap.cat b/doc/sudoers.ldap.cat
index 19f3294adeca344958365f366241dee86c045371..89e122a0805dead435ce82f66925b863d91d32c1 100644 (file)
--- a/doc/sudoers.ldap.cat
+++ b/doc/sudoers.ldap.cat
@@ -107,22 +107,26 @@ D\bDE\bES\bSC\bCR\bRI\bIP\bPT\bTI\bIO\bON\bN
            1.7.0 and higher.
 
        s\bsu\bud\bdo\boN\bNo\bot\btB\bBe\bef\bfo\bor\bre\be
-           A timestamp in the form yyyymmddHHMMZ that can be used to provide a
-           start date/time for when the sudoRole will be valid.  If multiple
+           A timestamp in the form yyyymmddHHMMSSZ that can be used to provide
+           a start date/time for when the sudoRole will be valid.  If multiple
            sudoNotBefore entries are present, the earliest is used.  Note that
            timestamps must be in Coordinated Universal Time (UTC), not the
-           local timezone.
+           local timezone.  The minute and seconds portions are optional, but
+           some LDAP servers require that they be present (contrary to the
+           RFC).
 
            The sudoNotBefore attribute is only available in s\bsu\bud\bdo\bo versions
            1.7.5 and higher and must be explicitly enabled via the
            S\bSU\bUD\bDO\bOE\bER\bRS\bS_\b_T\bTI\bIM\bME\bED\bD option in _\b/_\be_\bt_\bc_\b/_\bl_\bd_\ba_\bp_\b._\bc_\bo_\bn_\bf.
 
        s\bsu\bud\bdo\boN\bNo\bot\btA\bAf\bft\bte\ber\br
-           A timestamp in the form yyyymmddHHMMZ that indicates an expiration
-           date/time, after which the sudoRole will no longer be valid.  If
-           multiple sudoNotBefore entries are present, the last one is used.
-           Note that timestamps must be in Coordinated Universal Time (UTC),
-           not the local timezone.
+           A timestamp in the form yyyymmddHHMMSSZ that indicates an
+           expiration date/time, after which the sudoRole will no longer be
+           valid.  If multiple sudoNotBefore entries are present, the last one
+           is used.  Note that timestamps must be in Coordinated Universal
+           Time (UTC), not the local timezone.  The minute and seconds
+           portions are optional, but some LDAP servers require that they be
+           present (contrary to the RFC).
 
            The sudoNotAfter attribute is only available in s\bsu\bud\bdo\bo versions 1.7.5
            and higher and must be explicitly enabled via the S\bSU\bUD\bDO\bOE\bER\bRS\bS_\b_T\bTI\bIM\bME\bED\bD
@@ -738,4 +742,4 @@ D\bDI\bIS\bSC\bCL\bLA\bAI\bIM\bME\bER\bR
 
 
 
-1.8.1p2                          May 16, 2011                  SUDOERS.LDAP(4)
+1.8.2                           August 17, 2011                SUDOERS.LDAP(4)