diff options
| author | Fabiano Fidêncio <fidencio@redhat.com> | 2016-10-17 18:58:50 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2016-11-10 22:20:24 +0100 |
| commit | 682c9c3467055c2149af28826f7458b857b0f8c4 (patch) | |
| tree | b0e397914c4e2caf34b2595377a6f9ee152f65b7 /src/config | |
| parent | da8801c363716533f60bc78e10f3a2100cebc3a1 (diff) | |
| download | sssd-682c9c3467055c2149af28826f7458b857b0f8c4.tar.gz sssd-682c9c3467055c2149af28826f7458b857b0f8c4.tar.xz sssd-682c9c3467055c2149af28826f7458b857b0f8c4.zip | |
SECRETS: Add allowed_sec_users_options
There are options (the proxying related ones) that only apply to the
secrets' subsections. In order to make config API able to catch those,
let's create a new section called allowed_sec_users_options) and move
there these proxying options.
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
Diffstat (limited to 'src/config')
| -rw-r--r-- | src/config/cfg_rules.ini | 15 |
1 files changed, 10 insertions, 5 deletions
diff --git a/src/config/cfg_rules.ini b/src/config/cfg_rules.ini index 24937c969..882a185d8 100644 --- a/src/config/cfg_rules.ini +++ b/src/config/cfg_rules.ini @@ -8,7 +8,8 @@ section = autofs section = ssh section = pac section = ifp -section_re = ^secrets\(/users/[0-9]\+\)\?$ +section = secrets +section_re = ^secrets/users/[0-9]\+$ section_re = ^domain/.*$ [rule/allowed_sssd_options] @@ -211,9 +212,10 @@ option = description option = allowed_uids option = user_attributes +# Secrets service [rule/allowed_sec_options] validator = ini_allowed_options -section_re = ^secrets\(/users/[0-9]\+\)\?$ +section_re = ^secrets$ option = timeout option = debug @@ -226,12 +228,15 @@ option = reconnection_retries option = fd_limit option = client_idle_timeout option = description - -# Secrets service -option = provider option = containers_nest_level option = max_secrets + +[rule/allowed_sec_users_options] +validator = ini_allowed_options +section_re = ^secrets/users/[0-9]\+$ + # Secrets service - proxy +option = provider option = proxy_url option = auth_type option = auth_header_name |