[autobackport: sssd-2-9] Tests: add ldap_sudo_search_base warning test#8963
Conversation
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request adds a new system test test_sudo__ldap_sudo_search_base_not_set_emits_warning to verify that SSSD emits a security warning in both the domain debug log and the system journal when ldap_sudo_search_base is not configured. There are no review comments, so I have no feedback to provide.
Important
The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.
When ldap_sudo_search_base is not set, SSSD defaults to searching the entire directory tree for sudoRole objects. In this case, we expect a warning message to be logged. Assisted-By: Claude Code (Sonnet 4.6 (1M context)) Reviewed-by: Jakub Vávra <jvavra@redhat.com> (cherry picked from commit 4b915fc)
|
The pull request was accepted by @jakub-vavra-cz with the following PR CI status: 🟢 CodeQL (success) There are unsuccessful or unfinished checks. Make sure that the failures are not related to this pull request before merging. |
b681cd5 to
bbd606f
Compare
3 participants
This is an automatic backport of PR#8902 Tests: add ldap_sudo_search_base warning test to branch sssd-2-9, created by @spoore1.
Please make sure this backport is correct.
Note
The commits were cherry-picked without conflicts.
You can push changes to this pull request
Original commits
4b915fc - Tests: add ldap_sudo_search_base warning test
Backported commits
Original Pull Request Body
When ldap_sudo_search_base is not set, SSSD defaults to searching the entire directory tree for sudoRole objects. In this case, we expect a warning message to be logged.
Assisted-By: Claude Code (Sonnet 4.6 (1M context))