SSSD / sssd

#3515 Disable host wildcards in sudoHost attribute (ldap_sudo_include_regexp=false)
Closed: Fixed Opened by jhrozek.

Closed: Fixed
Reopen Issue

We should disable the ldap_sudo_include_regexp option by default as the wildcard is very costly to evalute on the LDAP server side and this feature is rarely used.

Whoever is interested can always enable this feature by toggling the switch.

Metadata Update from @jhrozek:
- Issue tagged with: breaks compatibility

Metadata Update from @jhrozek:
- Issue set to the milestone: SSSD 2.0

PR:https://github.com/SSSD/sssd/pull/387

Metadata Update from @jhrozek:
- Issue priority set to: minor

Metadata Update from @fidencio:
- Issue assigned to fidencio

PR: https://github.com/SSSD/sssd/pull/627

Metadata Update from @fidencio:
- Issue tagged with: PR
  • master: a2d543f61266f7ec0095a5395a4ea38c8e1426d5

Metadata Update from @jhrozek:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4541

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Commit a7099b72 fixes this issue
Metadata

PR breaks compatibility

None
None
High
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.