[SSSD] [PATCH] Configuration parsing modifications

Simo Sorce ssorce at redhat.com
Wed Apr 20 12:49:59 UTC 2011


On Tue, 19 Apr 2011 16:17:52 -0400
Stephen Gallagher <sgallagh at redhat.com> wrote:

> On Fri, 2011-04-01 at 16:46 +0200, Jan Zelený wrote:
> > These changes are all related to the following ticket:
> > https://fedorahosted.org/sssd/ticket/763
> > 
> > Changes in SSSDConfig.py merge old and new domain record instead of
> > just deleting the old and inserting the new one. The old approach
> > let to loss of some information like comments and blank lines in
> > the config file.
> > 
> > Changes in API config were performed so our Python scripts (like
> > sss_obfuscate) don't add extra config options to the config file.
> > 
> 
> 
> Nack.
> 
> As we discussed on IRC, the 'services' option in [sssd] must be left
> as mandatory.
> 
> Similarly, do not make krb5_realm optional. It must exist if using the
> kerberos provider.
>        krb5_realm (string)
>            The name of the Kerberos realm. This option is required
>            and must be specified.

Technically we could make this optional and take the default realm from
krb5.conf if it is missing ...

But I am perfectly ok with leaving it as a mandatory option.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York


More information about the sssd-devel mailing list