On (08/07/16 12:17), Michal Židek wrote:
>From 66419775a94768efe8c98ce6e8bbfa4743107eae Mon Sep 17 00:00:00 2001
> From: =?UTF-8?q?Michal=20=C5=BDidek?= <mzidek(a)redhat.com>
> Date: Fri, 8 Jul 2016 11:32:50 +0200
> Subject: [PATCH] config: Some fixes to schema
>
> Fixes:
>
https://fedorahosted.org/sssd/ticket/3068
>
> Option "timeout" must be allowed for all
> responders.
> Option "user_attributes" is
> also available in NSS responder.
> Option override_space is read from monitor
> section, not NSS.
> ---
> src/config/cfg_rules.ini | 10 +++++++++-
> src/config/etc/sssd.api.conf | 10 +++++++++-
> 2 files changed, 18 insertions(+), 2 deletions(-)
>
> diff --git a/src/config/etc/sssd.api.conf b/src/config/etc/sssd.api.conf
> index 9114659..03e5a72 100644
> --- a/src/config/etc/sssd.api.conf
> +++ b/src/config/etc/sssd.api.conf
> @@ -28,9 +28,12 @@ krb5_rcache_dir = str, None, false
> user = str, None, false
> default_domain_suffix = str, None, false
> certificate_verification = str, None, false
> +override_space = str, None, false
// snip
>
> [ifp]
> # InfoPipe responder
> +timeout = int, None, false
IMHO, it would be better to add it to the section
"[service]" The same as debug_level.
We would avoid some duplication
LS
new patch attached. There was one more error
with the PAC responder and user_attributes
option.
Michal