dpward / rpms / sssd

Forked from rpms/sssd 3 years ago
Clone

Blame SOURCES/0143-VALIDATORS-Add-subdomain-section.patch

bb7cd1
From 270121098caff2496da73795fe586ff734ae1e56 Mon Sep 17 00:00:00 2001
bb7cd1
From: =?UTF-8?q?Michal=20=C5=BDidek?= <mzidek@redhat.com>
bb7cd1
Date: Tue, 4 Apr 2017 18:01:02 +0200
bb7cd1
Subject: [PATCH 143/152] VALIDATORS: Add subdomain section
bb7cd1
MIME-Version: 1.0
bb7cd1
Content-Type: text/plain; charset=UTF-8
bb7cd1
Content-Transfer-Encoding: 8bit
bb7cd1
bb7cd1
Add separate rule for subdomain sections.
bb7cd1
bb7cd1
Resolves:
bb7cd1
https://pagure.io/SSSD/sssd/issue/3356
bb7cd1
bb7cd1
Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
bb7cd1
---
bb7cd1
 src/config/cfg_rules.ini | 17 ++++++++++++++++-
bb7cd1
 1 file changed, 16 insertions(+), 1 deletion(-)
bb7cd1
bb7cd1
diff --git a/src/config/cfg_rules.ini b/src/config/cfg_rules.ini
bb7cd1
index e47ff33242d6a9e5979fe0eb8eea14c2af28685a..4b30e8fc43b50844023e7fffa607a59530a302f0 100644
bb7cd1
--- a/src/config/cfg_rules.ini
bb7cd1
+++ b/src/config/cfg_rules.ini
bb7cd1
@@ -11,7 +11,8 @@ section = ifp
bb7cd1
 section = secrets
bb7cd1
 section = kcm
bb7cd1
 section_re = ^secrets/users/[0-9]\+$
bb7cd1
-section_re = ^domain/.*$
bb7cd1
+section_re = ^domain/[^/\@]\+$
bb7cd1
+section_re = ^domain/[^/\@]\+/[^/\@]\+$
bb7cd1
 section_re = ^application/.*$
bb7cd1
 
bb7cd1
 [rule/allowed_sssd_options]
bb7cd1
@@ -698,3 +699,17 @@ validator = ini_allowed_options
bb7cd1
 section_re = ^application/.*$
bb7cd1
 
bb7cd1
 option = inherit_from
bb7cd1
+
bb7cd1
+[rule/allowed_subdomain_options]
bb7cd1
+validator = ini_allowed_options
bb7cd1
+section_re = ^domain/[^/\@]\+/[^/\@]\+$
bb7cd1
+
bb7cd1
+option = ldap_search_base
bb7cd1
+option = ldap_user_search_base
bb7cd1
+option = ldap_group_search_base
bb7cd1
+option = ldap_netgroup_search_base
bb7cd1
+option = ldap_service_search_base
bb7cd1
+option = ad_server
bb7cd1
+option = ad_backup_server
bb7cd1
+option = ad_site
bb7cd1
+option = use_fully_qualified_names
bb7cd1
-- 
bb7cd1
2.9.4
bb7cd1