Imported Upstream version 1.7.2p6

[debian/sudo] / sudoers2ldif

diff --git a/sudoers2ldif b/sudoers2ldif
index b43f494bb57b9577e738768f5b1022ddb415beb7..0fe0ad15bfe6fa8cc4ce9950395700485a7e4b89 100644 (file)
--- a/sudoers2ldif
+++ b/sudoers2ldif
@@ -5,17 +5,19 @@ use strict;
 # Converts a sudoers file to LDIF format in prepration for loading into
 # the LDAP server.
 #
-# $Sudo: sudoers2ldif,v 1.2 2004/02/13 02:08:27 aaron Exp $
-#
 
 # BUGS:
 #   Does not yet handle multiple lines with : in them
-#   Does not yet handle runas (xxx) syntax.
 #   Does not yet remove quotation marks from options
 #   Does not yet escape + at the beginning of a dn
 #   Does not yet handle line wraps correctly
 #   Does not yet handle multiple roles with same name (needs tiebreaker)
+#
+# CAVEATS:
+#   Sudoers entries can have multiple RunAs entries that override former ones,
+#      with LDAP sudoRunAs{Group,User} applies to all commands in a sudoRole
 
+my %RA;
 my %UA;
 my %HA;
 my %CA;
@@ -50,8 +52,10 @@ while (<>){
     $p2=~s/\s+$//; # remove trailing whitespace
     $p3=~s/\s+$//; # remove trailing whitespace
 
-    if      ($p1 eq "User_Alias") {
+    if ($p1 eq "User_Alias") {
       $UA{$p2}=$p3;
+    } elsif ($p1 eq "Runas_Alias") {
+      $RA{$p2}=$p3;
     } elsif ($p1 eq "Host_Alias") {
       $HA{$p2}=$p3;
     } elsif ($p1 eq "Cmnd_Alias") {
@@ -79,6 +83,17 @@ while (<>){
       # will clobber options
       print "sudoUser: $_\n"   foreach expand(\%UA,@users);
       print "sudoHost: $_\n"   foreach expand(\%HA,@hosts);
+      foreach (@cmds) {
+       if (s/^\(([^\)]+)\)\s*//) {
+         my @runas = split(/:\s*/, $1);
+         if (defined($runas[0])) {
+           print "sudoRunAsUser: $_\n" foreach expand(\%RA, split(/,\s*/, $runas[0]));
+         }
+         if (defined($runas[1])) {
+           print "sudoRunAsGroup: $_\n" foreach expand(\%RA, split(/,\s*/, $runas[1]));
+         }
+       }
+      }
       print "sudoCommand: $_\n" foreach expand(\%CA,@cmds);
       print "sudoOption: $_\n" foreach @options;
       print "\n";
@@ -103,6 +118,8 @@ sub expand{
     s/PASSWD:\s*// && push @options,"authenticate";
     s/NOEXEC:\s*// && push @options,"noexec";
     s/EXEC:\s*// && push @options,"!noexec";
+    s/SETENV:\s*// && push @options,"setenv";
+    s/NOSETENV:\s*// && push @options,"!setenv";
     s/\w+://; # silently remove other directives
     s/\s+$//; # right trim
   }