From 3b8a7883de4d9c00ad48d436a67d5f69d8fed26a Mon Sep 17 00:00:00 2001
From: Martin Kosek <mkosek@redhat.com>
Date: Thu, 2 Oct 2014 10:31:42 +0200
Subject: [PATCH] Sudorule RunAsUser should work with external groups

https://fedorahosted.org/freeipa/ticket/4600

Reviewed-By: Tomas Babej <tbabej@redhat.com>
---
 ipalib/plugins/sudorule.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ipalib/plugins/sudorule.py b/ipalib/plugins/sudorule.py
index f16d275b2..1bd9042b9 100644
--- a/ipalib/plugins/sudorule.py
+++ b/ipalib/plugins/sudorule.py
@@ -792,8 +792,8 @@ class sudorule_add_runasuser(LDAPAddMember):
                                         failed=failed,
                                         completed=0,
                                         memberattr='ipasudorunas',
-                                        membertype='user',
-                                        externalattr='ipasudorunasextuser',
+                                        membertype='group',
+                                        externalattr='ipasudorunasextusergroup',
                                         )
 
         return (completed + completed_ex_users + completed_ex_groups, dn)