From fff47a319a820dc017d36e436901a9f7507d9a47 Mon Sep 17 00:00:00 2001
From: "Todd C. Miller" <Todd.Miller@courtesan.com>
Date: Wed, 21 Nov 2007 18:44:48 +0000
Subject: [PATCH] hostname_matches() returns TRUE on match in sudo 1.7.

---
 ldap.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ldap.c b/ldap.c
index 0c4984096..2af8ae5fd 100644
--- a/ldap.c
+++ b/ldap.c
@@ -185,7 +185,7 @@ sudo_ldap_check_host(ld, entry)
 	/* match any or address or netgroup or hostname */
 	if (!strcmp(*p, "ALL") || addr_matches(*p) ||
 	    netgr_matches(*p, user_host, user_shost, NULL) ||
-	    !hostname_matches(user_shost, user_host, *p))
+	    hostname_matches(user_shost, user_host, *p))
 	    ret = TRUE;
 	DPRINTF(("ldap sudoHost '%s' ... %s", *p,
 	    ret ? "MATCH!" : "not"), 2);
-- 
2.40.0