X-Git-Url: https://git.gag.com/?a=blobdiff_plain;f=doc%2Fsudoers.ldap.cat;h=67d6d863f26f6c30b4377c50b502c2cdb5c02167;hb=refs%2Ftags%2Fupstream%2F1.8.5;hp=fcbc56a03d0af998d48630125d805ddaf709a3f3;hpb=ca5f7615983706c51b50ac5a8bfc4e123263df0e;p=debian%2Fsudo diff --git a/doc/sudoers.ldap.cat b/doc/sudoers.ldap.cat index fcbc56a..67d6d86 100644 --- a/doc/sudoers.ldap.cat +++ b/doc/sudoers.ldap.cat @@ -12,25 +12,25 @@ DDEESSCCRRIIPPTTIIOONN Using LDAP for _s_u_d_o_e_r_s has several benefits: - +o ssuuddoo no longer needs to read _s_u_d_o_e_r_s in its entirety. When LDAP is + o ssuuddoo no longer needs to read _s_u_d_o_e_r_s in its entirety. When LDAP is used, there are only two or three LDAP queries per invocation. This makes it especially fast and particularly usable in LDAP environments. - +o ssuuddoo no longer exits if there is a typo in _s_u_d_o_e_r_s. It is not + o ssuuddoo no longer exits if there is a typo in _s_u_d_o_e_r_s. It is not possible to load LDAP data into the server that does not conform to the sudoers schema, so proper syntax is guaranteed. It is still possible to have typos in a user or host name, but this will not prevent ssuuddoo from running. - +o It is possible to specify per-entry options that override the + o It is possible to specify per-entry options that override the global default options. _/_e_t_c_/_s_u_d_o_e_r_s only supports default options and limited options associated with user/host/commands/aliases. The syntax is complicated and can be difficult for users to understand. Placing the options directly in the entry is more natural. - +o The vviissuuddoo program is no longer needed. vviissuuddoo provides locking + o The vviissuuddoo program is no longer needed. vviissuuddoo provides locking and syntax checking of the _/_e_t_c_/_s_u_d_o_e_r_s file. Since LDAP updates are atomic, locking is no longer necessary. Because syntax is checked when the data is inserted into LDAP, there is no need for a @@ -747,4 +747,4 @@ DDIISSCCLLAAIIMMEERR -1.8.4 January 6, 2012 SUDOERS.LDAP(4) +1.8.5 March 14, 2012 SUDOERS.LDAP(4)