summaryrefslogtreecommitdiffstats
path: root/src/config/cfg_rules.ini
diff options
context:
space:
mode:
authorFabiano Fidêncio <fidencio@redhat.com>2017-03-26 03:00:14 +0200
committerJakub Hrozek <jhrozek@redhat.com>2017-03-29 14:00:17 +0200
commit16385568547351b5d2c562f3081f35f3341f695b (patch)
treec81506d7703539822cedbf6b52b72f27b56090e4 /src/config/cfg_rules.ini
parent1e437af958f59a0b8bf2f751d3c2ea28365ac64d (diff)
downloadsssd-16385568547351b5d2c562f3081f35f3341f695b.tar.gz
sssd-16385568547351b5d2c562f3081f35f3341f695b.tar.xz
sssd-16385568547351b5d2c562f3081f35f3341f695b.zip
Add domain_resolution_order config option
This is the local equivalent of option of ipaDomainResolutionOrder and has precedence over the ones set on IPA side making the precedence order to be like: Local > View > Globally. As done for the IPA side configurations, the domains which were not explicitly set up will be apennded to the final of the domain_resolution_order list in the very same order they're presented in the "domains" option of [sssd] section in the config file. There's no guarantee of order for the subdomains though. It's also important to mention that no expansion magic is performed on our side. It means that if 'example.com' is set it does *not* stand for all its subdomains DNS wise (like 'foo.example.com', 'bar.example.com', etc). Related: https://pagure.io/SSSD/sssd/issue/3001 Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com> Reviewed-by: Sumit Bose <sbose@redhat.com> Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Diffstat (limited to 'src/config/cfg_rules.ini')
-rw-r--r--src/config/cfg_rules.ini1
1 files changed, 1 insertions, 0 deletions
diff --git a/src/config/cfg_rules.ini b/src/config/cfg_rules.ini
index 933ebccd8..41efcea55 100644
--- a/src/config/cfg_rules.ini
+++ b/src/config/cfg_rules.ini
@@ -43,6 +43,7 @@ option = override_space
option = config_file_version
option = disable_netlink
option = enable_files_domain
+option = domain_resolution_order
[rule/allowed_nss_options]
validator = ini_allowed_options