English
SSSD Manual pages
sssd.conf
5
File Formats and Conventions
the configuration file for SSSD
FILE FORMAT
<replaceable>[section]</replaceable>
<replaceable>key</replaceable> = <replaceable>value</replaceable>
<replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>
The file has an ini-style syntax and consists of sections and parameters. A section begins with the name of the section in square brackets and continues until the next section begins. An example of section with single and multi-valued parameters: <placeholder type="programlisting" id="0"/>
The data types used are string (no quotes needed), integer and bool (with values of <quote>TRUE/FALSE</quote>).
A comment line starts with a hash sign (<quote>#</quote>) or a semicolon (<quote>;</quote>). Inline comments are not supported.
All sections can have an optional <replaceable>description</replaceable> parameter. Its function is only as a label for the section.
<filename>sssd.conf</filename> must be a regular file, owned by root and only root may read from or write to the file.
CONFIGURATION SNIPPETS FROM INCLUDE DIRECTORY
The configuration file <filename>sssd.conf</filename> will include configuration snippets using the include directory <filename>conf.d</filename>. This feature is available if SSSD was compiled with libini version 1.3.0 or later.
Any file placed in <filename>conf.d</filename> that ends in <quote><filename>.conf</filename></quote> and does not begin with a dot (<quote>.</quote>) will be used together with <filename>sssd.conf</filename> to configure SSSD.
The configuration snippets from <filename>conf.d</filename> have higher priority than <filename>sssd.conf</filename> and will override <filename>sssd.conf</filename> when conflicts occur. If several snippets are present in <filename>conf.d</filename>, then they are included in alphabetical order (based on locale). Files included later have higher priority. Numerical prefixes (<filename>01_snippet.conf</filename>, <filename>02_snippet.conf</filename> etc.) can help visualize the priority (higher number means higher priority).
The snippet files require the same owner and permissions as <filename>sssd.conf</filename>. Which are by default root:root and 0600.
GENERAL OPTIONS
Following options are usable in more than one configuration sections.
Options usable in all sections