#1264 RFE: Allow overriding sssd.conf with secondary config file
Closed: Fixed None Opened 12 years ago by sgallagh.

Quoted from https://fedorahosted.org/pipermail/sssd-devel/2012-March/009043.html

Wondering about whether this feature exists or is planned to exist? It is for use in a shared administration environment. We have central administration and local administrators. It would allow a central configuration for sssd with local changes. Puppet could manage the central main file and include a user managed portion. We handle sudoers in a similar way. I guess the main use of this might be to allow local admins to control who can login to a server. sssd.conf could include something like this:

access_provider = simple
simple_allow_groups = central_admins

and the included locally managed file could have

simple_allow_users = user01, user03, user42

I know we can do this in other ways with puppet, but this would be simpler and it seems to me an include feature might have other uses.


(In #1165) I think we need to divide this into two tickets. There really are two different requests going on here.

The original request for this ticket was "the possibility to split configuration based on a logic grouping of directives. A file per domain is a good example of what I was intending/asking."

However, the request made in the email thread was more like my second question. He wants the ability to set up the configuration centrally, but be able to merge "override" values into it from a secondary local file.

I think we probably need to account for both cases, but they deserve separate tickets. I've opened ticket #1264 to track this.

blockedby: => 1165

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.11 beta
owner: somebody => dpal

Fields changed

proposed_priority: => Nice to have

Moving all the features planned for 1.10 release into 1.10 beta.

milestone: SSSD 1.11 beta => SSSD 1.10 beta

Fields changed

priority: major => minor

Fields changed

selected: => Not need

Moving tickets that are not a priority for SSSD 1.10 into the next release.

milestone: SSSD 1.10 beta => SSSD 1.11 beta

Fields changed

cc: => Michael.Gliwinski@henderson-group.com
changelog: =>
design: =>
design_review: => 0
fedora_test_page: =>
review: => 0

BTW ding-libs already support the required functionality to merge the configs so it is up to SSSD to define the merge rules and allow multiple configs.

This ticket is superseded by ticket #2247. Moving to Deferred. IMO #2247 when fully implemented would cover this use case too.

milestone: SSSD 1.13 beta => SSSD Deferred

This was implemented by config snippets.

mark: => 0
resolution: => fixed
sensitive: => 0
status: new => closed

Metadata Update from @sgallagh:
- Issue assigned to dpal
- Issue marked as depending on: #1165
- Issue set to the milestone: SSSD Patches welcome

7 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/2306

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata