[sudo-workers] LDAP SudoOrder max value

[Daniele Palumbo]

Hi, 

I am seeking the maximum value that a sudoOrder option defined in LDAP may take.

From LDAP definition, seems that there are no limit [2,3].

From sudo ldap.c[1] seems to be a signed double (that on some implementation is in example 1.79769^308).

May you please confirm that signed double is the maximum value that sudoOrder may take, if not limited by LDAP itself?

Thank you very much,
Daniele



1: https://www.sudo.ws/repos/sudo/file/tip/plugins/sudoers/ldap.c
2: https://www.sudo.ws/repos/sudo/file/tip/doc/schema.OpenLDAP
3: https://tools.ietf.org/html/rfc4517#page-15

"""
3.3.16.  Integer


   A value of the Integer syntax is a whole number of unlimited

   magnitude.  The LDAP-specific encoding of a value of this syntax is

   the optionally signed decimal digit character string representation

   of the number (for example, the number 1321 is represented by the

   character string "1321"). 
"""