summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMichal Židek <mzidek@redhat.com>2017-04-04 18:01:02 +0200
committerLukas Slebodnik <lslebodn@redhat.com>2017-05-31 16:38:47 +0200
commit0ab730850171c125cd4ce578c123656dd88eb484 (patch)
tree9687fc21d3363d30534f9a94c1c470748d1d31c5
parent8ccc9b7c317cf5ee8f295b38bfc4c2b7d551f8f1 (diff)
downloadsssd-0ab730850171c125cd4ce578c123656dd88eb484.tar.gz
sssd-0ab730850171c125cd4ce578c123656dd88eb484.tar.xz
sssd-0ab730850171c125cd4ce578c123656dd88eb484.zip
VALIDATORS: Add subdomain section
Add separate rule for subdomain sections. Resolves: https://pagure.io/SSSD/sssd/issue/3356 Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
-rw-r--r--src/config/cfg_rules.ini17
1 files changed, 16 insertions, 1 deletions
diff --git a/src/config/cfg_rules.ini b/src/config/cfg_rules.ini
index 70be88364..4cc0534b8 100644
--- a/src/config/cfg_rules.ini
+++ b/src/config/cfg_rules.ini
@@ -11,7 +11,8 @@ section = ifp
section = secrets
section = kcm
section_re = ^secrets/users/[0-9]\+$
-section_re = ^domain/.*$
+section_re = ^domain/[^/\@]\+$
+section_re = ^domain/[^/\@]\+/[^/\@]\+$
section_re = ^application/.*$
[rule/allowed_sssd_options]
@@ -699,3 +700,17 @@ validator = ini_allowed_options
section_re = ^application/.*$
option = inherit_from
+
+[rule/allowed_subdomain_options]
+validator = ini_allowed_options
+section_re = ^domain/[^/\@]\+/[^/\@]\+$
+
+option = ldap_search_base
+option = ldap_user_search_base
+option = ldap_group_search_base
+option = ldap_netgroup_search_base
+option = ldap_service_search_base
+option = ad_server
+option = ad_backup_server
+option = ad_site
+option = use_fully_qualified_names