about summary refs log tree commit diff
path: root/nixos/modules/security
diff options
context:
space:
mode:
authorBenjamin Staffin <benley@gmail.com>2024-06-22 11:31:18 -0400
committerGitHub <noreply@github.com>2024-06-22 11:31:18 -0400
commit4530b8f72f4eb6a1811a82c7c4ff7f9a7c013a2f (patch)
tree617df238c4ae8f18f91c325fc4dc3240248cb2bb /nixos/modules/security
parente93ccda88728ca2269cd937cfeab127f0b69faee (diff)
nixos/ipa: Lower default sssd debug_level (#310662)
debug_level 65510 (0x3f7f0) is _extremely_ verbose, far more than one
would want in normal operation.  Setting these in the default config
also makes it difficult to override in a user config.  Anyone who needs
greater verbosity can add these options to their own sssd config, or
adjust them at runtime with `sssctl debug-level`.
Diffstat (limited to 'nixos/modules/security')
-rw-r--r--nixos/modules/security/ipa.nix2
1 files changed, 0 insertions, 2 deletions
diff --git a/nixos/modules/security/ipa.nix b/nixos/modules/security/ipa.nix
index b160d0bc23ef3..e746ca75724a1 100644
--- a/nixos/modules/security/ipa.nix
+++ b/nixos/modules/security/ipa.nix
@@ -244,7 +244,6 @@ in {
       ldap_user_extra_attrs = mail:mail, sn:sn, givenname:givenname, telephoneNumber:telephoneNumber, lock:nsaccountlock
 
       [sssd]
-      debug_level = 65510
       services = nss, sudo, pam, ssh, ifp
       domains = ${cfg.domain}
 
@@ -256,7 +255,6 @@ in {
       pam_verbosity = 3
 
       [sudo]
-      debug_level = 65510
 
       [autofs]