Hi Michel,

Are there any limitations of the "sudoCommand" values? e.g. length <= 64

attributetype ( 1.3.6.1.4.1.15953.9.1.3 NAME 'sudoCommand' DESC 'Command(s) to be executed by sudo' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

The LDAP definition for the IA5 String syntax is: ( 1.3.6.1.4.1.1466.115.121.1.26 DESC 'IA5 String' )

http://tools.ietf.org/search/rfc4517#section-3.3.15

AFAIK there should be no limitation of length according to rfc4517.

Regards

Juergen