|
 |
ecf709 |
From 270121098caff2496da73795fe586ff734ae1e56 Mon Sep 17 00:00:00 2001
|
|
|
ecf709 |
From: =?UTF-8?q?Michal=20=C5=BDidek?= <mzidek@redhat.com>
|
|
|
ecf709 |
Date: Tue, 4 Apr 2017 18:01:02 +0200
|
|
|
ecf709 |
Subject: [PATCH 143/152] VALIDATORS: Add subdomain section
|
|
|
ecf709 |
MIME-Version: 1.0
|
|
|
ecf709 |
Content-Type: text/plain; charset=UTF-8
|
|
|
ecf709 |
Content-Transfer-Encoding: 8bit
|
|
|
ecf709 |
|
|
|
ecf709 |
Add separate rule for subdomain sections.
|
|
|
ecf709 |
|
|
|
ecf709 |
Resolves:
|
|
|
ecf709 |
https://pagure.io/SSSD/sssd/issue/3356
|
|
|
ecf709 |
|
|
|
ecf709 |
Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
|
|
|
ecf709 |
---
|
|
|
ecf709 |
src/config/cfg_rules.ini | 17 ++++++++++++++++-
|
|
|
ecf709 |
1 file changed, 16 insertions(+), 1 deletion(-)
|
|
|
ecf709 |
|
|
|
ecf709 |
diff --git a/src/config/cfg_rules.ini b/src/config/cfg_rules.ini
|
|
|
ecf709 |
index e47ff33242d6a9e5979fe0eb8eea14c2af28685a..4b30e8fc43b50844023e7fffa607a59530a302f0 100644
|
|
|
ecf709 |
--- a/src/config/cfg_rules.ini
|
|
|
ecf709 |
+++ b/src/config/cfg_rules.ini
|
|
|
ecf709 |
@@ -11,7 +11,8 @@ section = ifp
|
|
|
ecf709 |
section = secrets
|
|
|
ecf709 |
section = kcm
|
|
|
ecf709 |
section_re = ^secrets/users/[0-9]\+$
|
|
|
ecf709 |
-section_re = ^domain/.*$
|
|
|
ecf709 |
+section_re = ^domain/[^/\@]\+$
|
|
|
ecf709 |
+section_re = ^domain/[^/\@]\+/[^/\@]\+$
|
|
|
ecf709 |
section_re = ^application/.*$
|
|
|
ecf709 |
|
|
|
ecf709 |
[rule/allowed_sssd_options]
|
|
|
ecf709 |
@@ -698,3 +699,17 @@ validator = ini_allowed_options
|
|
|
ecf709 |
section_re = ^application/.*$
|
|
|
ecf709 |
|
|
|
ecf709 |
option = inherit_from
|
|
|
ecf709 |
+
|
|
|
ecf709 |
+[rule/allowed_subdomain_options]
|
|
|
ecf709 |
+validator = ini_allowed_options
|
|
|
ecf709 |
+section_re = ^domain/[^/\@]\+/[^/\@]\+$
|
|
|
ecf709 |
+
|
|
|
ecf709 |
+option = ldap_search_base
|
|
|
ecf709 |
+option = ldap_user_search_base
|
|
|
ecf709 |
+option = ldap_group_search_base
|
|
|
ecf709 |
+option = ldap_netgroup_search_base
|
|
|
ecf709 |
+option = ldap_service_search_base
|
|
|
ecf709 |
+option = ad_server
|
|
|
ecf709 |
+option = ad_backup_server
|
|
|
ecf709 |
+option = ad_site
|
|
|
ecf709 |
+option = use_fully_qualified_names
|
|
|
ecf709 |
--
|
|
|
ecf709 |
2.9.4
|
|
|
ecf709 |
|