Hide Forgot
Description of problem: sssctl does not show the exact file name where the error is found? Error may be in any snippet file or in sssd.conf Version-Release number of selected component (if applicable): sssd-1.14.0-27.el7.x86_64 How reproducible: Always Steps to Reproduce: 1) Install sssd package 2) Install sssd-tools package 3) Create sssd.conf in /etc/sssd/ 4) Create snippet files in /etc/sssd/conf.d/ 5) Run sssctl config-check [root@server ~]# cat /etc/sssd/sssd.conf [sssd] services = nss, pam config_file_version = 2 domains = LDAP [domain/LDAP] ldap_search_base = dc=example,dc=com offline_timeoutX = id_provider = ldap auth_provider = ldap ldap_uri = ldap://server.example.com ldap_id_use_start_tls = True ldap_tls_cacert = /etc/openldap/certs/cacert.asc debug_level = 10 [root@server ~]# cat /etc/sssd/conf.d/02_snippet_file.conf [domain/LDAP] d_provider = ldap After running # sssctl config-check gives output as follow: [root@server ~]# sssctl config-check Issues identified by validators: 2 [rule/allowed_domain_options]: Attribute 'offline_timeoutX' is not allowed in section 'domain/LDAP'. Check for typos. [rule/allowed_domain_options]: Attribute 'd_provider' is not allowed in section 'domain/LDAP'. Check for typos. Messages generated during configuration merging: 0 Used configuration snippet files: 3 /etc/sssd/conf.d/01_snippet_file.conf /etc/sssd/conf.d/02_snippet_file.conf /etc/sssd/conf.d/03_snippet_file.conf After seeing the above output, it is not easy to find the file having the error? Validators function only checked the typos but did not show which typos were in which configuration file. It only gives the list of typos found. Expected Result: It should give the name of configuration file causing the error message so it is easy to fix.
It's not a bug it's expected behaviour. Because the validation is done after merging all snippets file together So the information about files and lines are lost. BTW. It's not too difficult for users to call grep and find typos.
(In reply to Lukas Slebodnik from comment #1) > It's not a bug it's expected behaviour. > > Because the validation is done after merging all snippets file together > So the information about files and lines are lost. > BTW. It's not too difficult for users to call grep and find typos. OK, I wasn't sure if this was totally not possible or just not implemented. Therefore I asked for this bug to be filed so we can ask Michal next week and let him close the bug or leave it open for future.
We can consider this ticket as RFE :-)
Michal is this possible at all (so should we turn this bug into an RFE) or should we rather close it?
We plan to add feature into sssctl that will print values of all configured options (only options that were explicitly configured, not default ones) together with their source file (snippet file or sssd.conf). This is however not possible with the current version of libini. We will have to enhance it to store additional metadata during the parsing. When this is done, this RFE will be simple. However we did not plan (in terms of milestones) the above feature yet.
(In reply to Michal Zidek from comment #6) > We plan to add feature into sssctl that will print values of all configured > options (only options that were explicitly configured, not default ones) > together with their source file (snippet file or sssd.conf). > > This is however not possible with the current version of libini. We will > have to enhance it to store additional metadata during the parsing. When > this is done, this RFE will be simple. > > However we did not plan (in terms of milestones) the above feature yet. OK, can you file ticket(s) please?
Upstream ticket: https://fedorahosted.org/sssd/ticket/3158
Since fixing this bug requires work in the upstream SSSD project which is not scheduled for the immediate future, I added a conditional development nack, pending upstream availability.
Due to out limited capacity we are closing this BZ.