/ 
App-LDAP-0.1.2
River stage zero No dependents
/ App::LDAP::ObjectClass::SudoRole

NAME

App::LDAP::ObjectClass::SudoRole - schema of sudoRole

DEFINITION

objectclass (
    1.3.6.1.4.1.15953.9.2.1
    NAME 'sudoRole'
    SUP top
    STRUCTURAL
    DESC 'Sudoer Entries'
    MUST ( cn )
    MAY ( sudoUser $ sudoHost $ sudoCommand $ sudoRunAs $
          sudoRunAsUser $ sudoRunAsGroup $ sudoOption $ description )
)

NOTES

This definition is coming with sudo 1.7.0.

A sudoRole must contain at least one sudoUser, sudoHost and sudoCommand. Even the schema shows these three MAY be attributes of a sudoRole.

As of 1.7.0, sudoRunAs is deprecated. The attribute sudoRunAsUser is the replacement.

As of 1.7.5, three more attributes sudoNotBefore, sudoNotAfter and sudoOrder are defined. These three attributes would be supported when 1.7.5 is widely used.