|
 |
ecf709 |
From 39864f9ce41ce892fe3cafb769584173299f49f7 Mon Sep 17 00:00:00 2001
|
|
|
ecf709 |
From: =?UTF-8?q?Michal=20=C5=BDidek?= <mzidek@redhat.com>
|
|
|
ecf709 |
Date: Tue, 4 Apr 2017 19:07:12 +0200
|
|
|
ecf709 |
Subject: [PATCH 144/152] VALIDATORS: Remove application section domain
|
|
|
ecf709 |
MIME-Version: 1.0
|
|
|
ecf709 |
Content-Type: text/plain; charset=UTF-8
|
|
|
ecf709 |
Content-Transfer-Encoding: 8bit
|
|
|
ecf709 |
|
|
|
ecf709 |
Application domains can use the same options as normal domains section
|
|
|
ecf709 |
with one more additional option.
|
|
|
ecf709 |
|
|
|
ecf709 |
We could either duplicate all options from the domain section also in
|
|
|
ecf709 |
the application domain section + add the one additional option or
|
|
|
ecf709 |
add this one option to the domain section even though it is not meant
|
|
|
ecf709 |
to be used there to avoid duplication of all domain options in the
|
|
|
ecf709 |
rule for application section.
|
|
|
ecf709 |
|
|
|
ecf709 |
It would be could to enhance the validators in libini to allow
|
|
|
ecf709 |
something like 'include' section in order to avoid this issue
|
|
|
ecf709 |
in the future.
|
|
|
ecf709 |
|
|
|
ecf709 |
Resolves:
|
|
|
ecf709 |
https://pagure.io/SSSD/sssd/issue/3356
|
|
|
ecf709 |
|
|
|
ecf709 |
Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
|
|
|
ecf709 |
---
|
|
|
ecf709 |
src/config/cfg_rules.ini | 5 +----
|
|
|
ecf709 |
1 file changed, 1 insertion(+), 4 deletions(-)
|
|
|
ecf709 |
|
|
|
ecf709 |
diff --git a/src/config/cfg_rules.ini b/src/config/cfg_rules.ini
|
|
|
ecf709 |
index 4b30e8fc43b50844023e7fffa607a59530a302f0..a30fe57e262716abeb2d2af9c3add326122ee4ca 100644
|
|
|
ecf709 |
--- a/src/config/cfg_rules.ini
|
|
|
ecf709 |
+++ b/src/config/cfg_rules.ini
|
|
|
ecf709 |
@@ -694,10 +694,7 @@ option = ldap_user_uid_number
|
|
|
ecf709 |
option = ldap_user_uuid
|
|
|
ecf709 |
option = ldap_use_tokengroups
|
|
|
ecf709 |
|
|
|
ecf709 |
-[rule/allowed_application_options]
|
|
|
ecf709 |
-validator = ini_allowed_options
|
|
|
ecf709 |
-section_re = ^application/.*$
|
|
|
ecf709 |
-
|
|
|
ecf709 |
+# For application domains
|
|
|
ecf709 |
option = inherit_from
|
|
|
ecf709 |
|
|
|
ecf709 |
[rule/allowed_subdomain_options]
|
|
|
ecf709 |
--
|
|
|
ecf709 |
2.9.4
|
|
|
ecf709 |
|