hostname_matches() returns TRUE on match in sudo 1.7.

diff --git a/ldap.c b/ldap.c
index 0c498409663d300632401f22686c0e8c9edb7917..2af8ae5fdd0d0ebaaf6461abc636f3d925ceb6a9 100644 (file)
--- a/ldap.c
+++ b/ldap.c
@@ -185,7 +185,7 @@ sudo_ldap_check_host(ld, entry)
        /* match any or address or netgroup or hostname */
        if (!strcmp(*p, "ALL") || addr_matches(*p) ||
            netgr_matches(*p, user_host, user_shost, NULL) ||
-           !hostname_matches(user_shost, user_host, *p))
+           hostname_matches(user_shost, user_host, *p))
            ret = TRUE;
        DPRINTF(("ldap sudoHost '%s' ... %s", *p,
            ret ? "MATCH!" : "not"), 2);