online   0   0am_J*j"Tz^۪bѿ  0#lY>T:fN\ *bѿ d_?[rule/allowed_sections] validator = ini_allowed_sections section = sssd section = nss section = pam section = sudo section = autofs section = ssh section = pac section = ifp section = kcm section = session_recording section_re = ^prompting/password$ section_re = ^prompting/password/[^/\@]\+$ section_re = ^prompting/2fa$ section_re = ^prompting/2fa/[^/\@]\+$ section_re = ^prompting/passkey$ section_re = ^prompting/passkey/[^/\@]\+$ section_re = ^domain/[^/\@]\+$ section_re = ^domain/[^/\@]\+/[^/\@]\+$ section_re = ^application/[^/\@]\+$ section_re = ^certmap/[^/\@]\+/[^/\@]\+$ [rule/allowed_sssd_options] validator = ini_allowed_options section_re = ^sssd$ option = debug option = debug_level option = debug_timestamps option = debug_microseconds option = debug_backtrace_enabled option = command option = reconnection_retries option = fd_limit option = client_idle_timeout option = description # Monitor service option = services option = domains option = timeout option = re_expression option = full_name_format option = krb5_rcache_dir option = user option = default_domain_suffix option = certificate_verification option = override_space option = config_file_version option = disable_netlink option = enable_files_domain option = domain_resolution_order option = try_inotify option = monitor_resolv_conf option = implicit_pac_responder option = core_dumpable option = passkey_verification [rule/allowed_nss_options] validator = ini_allowed_options section_re = ^nss$ option = timeout option = debug option = debug_level option = debug_timestamps option = debug_microseconds option = debug_backtrace_enabled option = command option = reconnection_retries option = fd_limit option = client_idle_timeout option = description option = responder_idle_timeout option = cache_first # Name service option = user_attributes option = enum_cache_timeout option = entry_cache_nowait_percentage option = entry_negative_timeout option = local_negative_timeout option = filter_users option = filter_groups option = filter_users_in_groups option = pwfield option = override_homedir option = fallback_homedir option = homedir_substring option = override_shell option = allowed_shells option = vetoed_shells option = shell_fallback option = default_shell option = get_domains_timeout option = memcache_timeout option = memcache_size_passwd option = memcache_size_group option = memcache_size_initgroups option = memcache_size_sid [rule/allowed_pam_options] validator = ini_allowed_options section_re = ^pam$ option = timeout option = debug option = debug_level option = debug_timestamps option = debug_microseconds option = debug_backtrace_enabled option = command option = reconnection_retries option = fd_limit option = client_idle_timeout option = description option = responder_idle_timeout option = cache_first # Authentication service option = offline_credentials_expiration option = offline_failed_login_attempts option = offline_failed_login_delay option = pam_verbosity option = pam_response_filter option = pam_id_timeout option = pam_pwd_expiration_warning option = get_domains_timeout option = pam_trusted_users option = pam_public_domains option = pam_account_expired_message option = pam_account_locked_message option = pam_cert_auth option = pam_cert_db_path option = pam_cert_verification option = p11_child_timeout option = pam_app_services option = pam_p11_allowed_services option = p11_wait_for_card_timeout option = p11_uri option = pam_initgroups_scheme option = pam_gssapi_services option = pam_gssapi_check_upn option = pam_gssapi_indicators_map option = pam_passkey_auth option = passkey_child_timeout option = passkey_debug_libfido2 [rule/allowed_sudo_options] validator = ini_allowed_options section_re = ^sudo$ option = timeout option = debug option = debug_level option = debug_timestamps option = debug_microseconds option = debug_backtrace_enabled option = command option = reconnection_retries option = fd_limit option = cli