Ben Aveling wrote:
That makes sense. The only entries in my test sssd.conf were the new domain, so yes, in effect, the whole file was ignored/removed.
Suggesting it might have worked if I'd added ipv6_only somewhere else?
Unfortunately according to sssd.conf(5) lookup_family_order is only available in the domain section.
I think the most generic new cli option in ipa-client-install would load the existing domain and merely update it rather than creating a new one so this, or other configuration would be allowed. It also puts the onus on the end user to ensure to avoid conflicting configuration, etc.
rob