[sudo-workers] LDAP SudoOrder max value

Daniele Palumbo daniele at retaggio.net
Tue Oct 17 06:54:49 MDT 2017


I am seeking the maximum value that a sudoOrder option defined in LDAP may take.

From LDAP definition, seems that there are no limit [2,3].

From sudo ldap.c[1] seems to be a signed double (that on some implementation is in example 1.79769^308).

May you please confirm that signed double is the maximum value that sudoOrder may take, if not limited by LDAP itself?

Thank you very much,

1: https://www.sudo.ws/repos/sudo/file/tip/plugins/sudoers/ldap.c
2: https://www.sudo.ws/repos/sudo/file/tip/doc/schema.OpenLDAP
3: https://tools.ietf.org/html/rfc4517#page-15

3.3.16.  Integer

   A value of the Integer syntax is a whole number of unlimited

   magnitude.  The LDAP-specific encoding of a value of this syntax is

   the optionally signed decimal digit character string representation

   of the number (for example, the number 1321 is represented by the

   character string "1321"). 

More information about the sudo-workers mailing list