Is there a way to dump all config settings?
I'd like to know the defaults configured for everything I didn't set in the sssd.conf.
tia
On (17/07/14 12:54), Felipe Pereira wrote:
Is there a way to dump all config settings?
I'd like to know the defaults configured for everything I didn't set in the sssd.conf.
The dafault values are describen in manual pages. man sssd.conf
SEE ALSO sssd(8), sssd.conf(5), sssd-ldap(5), sssd-krb5(5), sssd-simple(5), sssd-ipa(5), sssd-ad(5), sssd-sudo(5),sss_cache(8), sss_debuglevel(8), sss_groupadd(8), sss_groupdel(8), sss_groupshow(8), sss_groupmod(8), sss_useradd(8), sss_userdel(8), sss_usermod(8), sss_obfuscate(8), sss_seed(8), sssd_krb5_locator_plugin(8), sss_ssh_authorizedkeys(8), sss_ssh_knownhostsproxy(8),sssd-ifp(5),pam_sss(8).
You may be interested in all manual pages from section 5.
Or did you mean something different?
LS
On Thu, 2014-07-17 at 18:04 +0200, Lukas Slebodnik wrote:
On (17/07/14 12:54), Felipe Pereira wrote:
Is there a way to dump all config settings?
I'd like to know the defaults configured for everything I didn't set in the sssd.conf.
The dafault values are describen in manual pages. man sssd.conf
SEE ALSO sssd(8), sssd.conf(5), sssd-ldap(5), sssd-krb5(5), sssd-simple(5), sssd-ipa(5), sssd-ad(5), sssd-sudo(5),sss_cache(8), sss_debuglevel(8), sss_groupadd(8), sss_groupdel(8), sss_groupshow(8), sss_groupmod(8), sss_useradd(8), sss_userdel(8), sss_usermod(8), sss_obfuscate(8), sss_seed(8), sssd_krb5_locator_plugin(8), sss_ssh_authorizedkeys(8), sss_ssh_knownhostsproxy(8),sssd-ifp(5),pam_sss(8).
You may be interested in all manual pages from section 5.
Or did you mean something different?
Hi I think he means something like 'testparm' on samba where it parses the smb.conf file and tells you if you got the syntax correct. Cheers, Steve
I thought he meant like "show running-config" on ios. For auto-discovery I guess the logs should describe things unspecified via config but discovered via DNS? Just a thought.
Sent from my iPhone
On Jul 17, 2014, at 12:36 PM, steve steve@steve-ss.com wrote:
On Thu, 2014-07-17 at 18:04 +0200, Lukas Slebodnik wrote:
On (17/07/14 12:54), Felipe Pereira wrote: Is there a way to dump all config settings?
I'd like to know the defaults configured for everything I didn't set in the sssd.conf.
The dafault values are describen in manual pages. man sssd.conf
SEE ALSO sssd(8), sssd.conf(5), sssd-ldap(5), sssd-krb5(5), sssd-simple(5), sssd-ipa(5), sssd-ad(5), sssd-sudo(5),sss_cache(8), sss_debuglevel(8), sss_groupadd(8), sss_groupdel(8), sss_groupshow(8), sss_groupmod(8), sss_useradd(8), sss_userdel(8), sss_usermod(8), sss_obfuscate(8), sss_seed(8), sssd_krb5_locator_plugin(8), sss_ssh_authorizedkeys(8), sss_ssh_knownhostsproxy(8),sssd-ifp(5),pam_sss(8).
You may be interested in all manual pages from section 5.
Or did you mean something different?
Hi I think he means something like 'testparm' on samba where it parses the smb.conf file and tells you if you got the syntax correct. Cheers, Steve
sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/sssd-users
On Thu, 2014-07-17 at 13:26 -0400, Bryan Harris wrote:
I thought he meant like "show running-config" on ios. For auto-discovery I guess the logs should describe things unspecified via config but discovered via DNS? Just a thought.
Sent from my iPhone
Yeah, could be. I was thinking more like testparm -v on smb.conf that shows you a syntax check listing and if it passes, all the default values you have not overridden.
On Jul 17, 2014, at 12:36 PM, steve steve@steve-ss.com wrote:
On Thu, 2014-07-17 at 18:04 +0200, Lukas Slebodnik wrote:
On (17/07/14 12:54), Felipe Pereira wrote: Is there a way to dump all config settings?
I'd like to know the defaults configured for everything I didn't set in the sssd.conf.
The dafault values are describen in manual pages. man sssd.conf
SEE ALSO sssd(8), sssd.conf(5), sssd-ldap(5), sssd-krb5(5), sssd-simple(5), sssd-ipa(5), sssd-ad(5), sssd-sudo(5),sss_cache(8), sss_debuglevel(8), sss_groupadd(8), sss_groupdel(8), sss_groupshow(8), sss_groupmod(8), sss_useradd(8), sss_userdel(8), sss_usermod(8), sss_obfuscate(8), sss_seed(8), sssd_krb5_locator_plugin(8), sss_ssh_authorizedkeys(8), sss_ssh_knownhostsproxy(8),sssd-ifp(5),pam_sss(8).
You may be interested in all manual pages from section 5.
Or did you mean something different?
Hi I think he means something like 'testparm' on samba where it parses the smb.conf file and tells you if you got the syntax correct. Cheers, Steve
sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/sssd-users
sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/sssd-users
Yes, that's what I meant. Like the output from /usr/sbin/postconf from postfix or testparm from samba.
On Thu, Jul 17, 2014 at 2:43 PM, steve steve@steve-ss.com wrote:
On Thu, 2014-07-17 at 13:26 -0400, Bryan Harris wrote:
I thought he meant like "show running-config" on ios. For auto-discovery
I guess the logs should describe things unspecified via config but discovered via DNS? Just a thought.
Sent from my iPhone
Yeah, could be. I was thinking more like testparm -v on smb.conf that shows you a syntax check listing and if it passes, all the default values you have not overridden.
On Jul 17, 2014, at 12:36 PM, steve steve@steve-ss.com wrote:
On Thu, 2014-07-17 at 18:04 +0200, Lukas Slebodnik wrote:
On (17/07/14 12:54), Felipe Pereira wrote: Is there a way to dump all config settings?
I'd like to know the defaults configured for everything I didn't set
in the
sssd.conf.
The dafault values are describen in manual pages. man sssd.conf
SEE ALSO sssd(8), sssd.conf(5), sssd-ldap(5), sssd-krb5(5),
sssd-simple(5),
sssd-ipa(5), sssd-ad(5), sssd-sudo(5),sss_cache(8),sss_debuglevel(8),
sss_groupadd(8), sss_groupdel(8), sss_groupshow(8),sss_groupmod(8),
sss_useradd(8), sss_userdel(8), sss_usermod(8),sss_obfuscate(8),
sss_seed(8), sssd_krb5_locator_plugin(8),sss_ssh_authorizedkeys(8),
sss_ssh_knownhostsproxy(8),sssd-ifp(5),pam_sss(8).You may be interested in all manual pages from section 5.
Or did you mean something different?
Hi I think he means something like 'testparm' on samba where it parses the smb.conf file and tells you if you got the syntax correct. Cheers, Steve
On 07/17/2014 02:16 PM, Felipe Pereira wrote:
Yes, that's what I meant. Like the output from /usr/sbin/postconf from postfix or testparm from samba.
We have long standing plans to include some validation logic into the ding-libs INI parser so that one can check if the syntax is correct and that everything is ok with the config file. But we have not had a chance to get to it yet.
On Thu, Jul 17, 2014 at 2:43 PM, steve <steve@steve-ss.com mailto:steve@steve-ss.com> wrote:
On Thu, 2014-07-17 at 13:26 -0400, Bryan Harris wrote: > I thought he meant like "show running-config" on ios. For auto-discovery I guess the logs should describe things unspecified via config but discovered via DNS? Just a thought. > > Sent from my iPhone Yeah, could be. I was thinking more like testparm -v on smb.conf that shows you a syntax check listing and if it passes, all the default values you have not overridden. > > > On Jul 17, 2014, at 12:36 PM, steve <steve@steve-ss.com <mailto:steve@steve-ss.com>> wrote: > > > >> On Thu, 2014-07-17 at 18:04 +0200, Lukas Slebodnik wrote: > >>> On (17/07/14 12:54), Felipe Pereira wrote: > >>> Is there a way to dump all config settings? > >>> > >>> I'd like to know the defaults configured for everything I didn't set in the > >>> sssd.conf. > >> The dafault values are describen in manual pages. > >> man sssd.conf > >> > >> SEE ALSO > >> sssd(8), sssd.conf(5), sssd-ldap(5), sssd-krb5(5), sssd-simple(5), > >> sssd-ipa(5), sssd-ad(5), sssd-sudo(5),sss_cache(8), sss_debuglevel(8), > >> sss_groupadd(8), sss_groupdel(8), sss_groupshow(8), sss_groupmod(8), > >> sss_useradd(8), sss_userdel(8), sss_usermod(8), sss_obfuscate(8), > >> sss_seed(8), sssd_krb5_locator_plugin(8), sss_ssh_authorizedkeys(8), > >> sss_ssh_knownhostsproxy(8),sssd-ifp(5),pam_sss(8). > >> > >> You may be interested in all manual pages from section 5. > >> > >> Or did you mean something different? > > > > Hi > > I think he means something like 'testparm' on samba where it parses the > > smb.conf file and tells you if you got the syntax correct. > > Cheers, > > Steve > >
sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/sssd-users
On Thu, 2014-07-17 at 15:22 -0400, Dmitri Pal wrote:
On 07/17/2014 02:16 PM, Felipe Pereira wrote:
Yes, that's what I meant. Like the output from /usr/sbin/postconf from postfix or testparm from samba.
We have long standing plans to include some validation logic into the ding-libs INI parser so that one can check if the syntax is correct and that everything is ok with the config file. But we have not had a chance to get to it yet.
Hi just a +1 from us That's good news. It's quite easy for coders to forget that people actually use their products in real situations. This is a good example. A real time saver for day to day admins. Really boring to have to code! Cheers, Steve
On Thu, Jul 17, 2014 at 12:54:54PM -0300, Felipe Pereira wrote:
Is there a way to dump all config settings?
I'd like to know the defaults configured for everything I didn't set in the sssd.conf.
If you bump the debug_level of a domain to 0x0400 you will see the backend configuration options. The output looks similar to this one from my test setup:
(Fri Jul 18 06:06:30 2014) [sssd[be[win.example.com]]] [dp_get_options] (0x0400): Option ad_domain has value win.example.com (Fri Jul 18 06:06:30 2014) [sssd[be[win.example.com]]] [dp_get_options] (0x0400): Option ad_server has no value (Fri Jul 18 06:06:30 2014) [sssd[be[win.example.com]]] [dp_get_options] (0x0400): Option ad_backup_server has no value (Fri Jul 18 06:06:30 2014) [sssd[be[win.example.com]]] [dp_get_options] (0x0400): Option ad_hostname has no value (Fri Jul 18 06:06:30 2014) [sssd[be[win.example.com]]] [dp_get_options] (0x0400): Option krb5_keytab has no value (Fri Jul 18 06:06:30 2014) [sssd[be[win.example.com]]] [dp_get_options] (0x0400): Option krb5_realm has value WIN.EXAMPLE.COM (Fri Jul 18 06:06:30 2014) [sssd[be[win.example.com]]] [dp_get_options] (0x0400): Option ad_enable_dns_sites is TRUE (Fri Jul 18 06:06:30 2014) [sssd[be[win.example.com]]] [dp_get_options] (0x0400): Option ad_access_filter has no value (Fri Jul 18 06:06:30 2014) [sssd[be[win.example.com]]] [dp_get_options] (0x0400): Option ad_enable_gc is TRUE (Fri Jul 18 06:06:30 2014) [sssd[be[win.example.com]]] [dp_get_options] (0x0400): Option ad_gpo_access_control has value permissive
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 07/18/2014 06:06 AM, Jakub Hrozek wrote:
On Thu, Jul 17, 2014 at 12:54:54PM -0300, Felipe Pereira wrote:
Is there a way to dump all config settings?
I'd like to know the defaults configured for everything I didn't set in the sssd.conf.
If you bump the debug_level of a domain to 0x0400 you will see the backend configuration options. The output looks similar to this one from my test setup:
(Fri Jul 18 06:06:30 2014) [sssd[be[win.example.com]]] [dp_get_options] (0x0400): Option ad_domain has value win.example.com (Fri Jul 18 06:06:30 2014) [sssd[be[win.example.com]]] [dp_get_options] (0x0400): Option ad_server has no value (Fri Jul 18 06:06:30 2014) [sssd[be[win.example.com]]] [dp_get_options] (0x0400): Option ad_backup_server has no value (Fri Jul 18 06:06:30 2014) [sssd[be[win.example.com]]] [dp_get_options] (0x0400): Option ad_hostname has no value (Fri Jul 18 06:06:30 2014) [sssd[be[win.example.com]]] [dp_get_options] (0x0400): Option krb5_keytab has no value (Fri Jul 18 06:06:30 2014) [sssd[be[win.example.com]]] [dp_get_options] (0x0400): Option krb5_realm has value WIN.EXAMPLE.COM (Fri Jul 18 06:06:30 2014) [sssd[be[win.example.com]]] [dp_get_options] (0x0400): Option ad_enable_dns_sites is TRUE (Fri Jul 18 06:06:30 2014) [sssd[be[win.example.com]]] [dp_get_options] (0x0400): Option ad_access_filter has no value (Fri Jul 18 06:06:30 2014) [sssd[be[win.example.com]]] [dp_get_options] (0x0400): Option ad_enable_gc is TRUE (Fri Jul 18 06:06:30 2014) [sssd[be[win.example.com]]] [dp_get_options] (0x0400): Option ad_gpo_access_control has value permissive
That doesn't describe the responder options or monitor options, though.
I think what you want to do is use the SSSDConfig python API, which you can use to see all of the options and their current values.
Unfortunately, it's not well documented (outside of the pydoc in the source), but the general approach would be something like:
(as root)
import SSSDConfig
cfg = SSSDConfig.SSSDConfig() cfg.import_config()
print cfg.list_services() svc = cfg.get_service('nss') opt_dict = svc.list_options()
print cfg.list_domains() dom = cfg.get_domain('example.com') dom_opt_dict = dom.list_options()
sssd-users@lists.fedorahosted.org
-
Bryan Harris -
Dmitri Pal -
Felipe Pereira -
Jakub Hrozek -
Lukas Slebodnik -
Stephen Gallagher -
steve