From 4530b8f72f4eb6a1811a82c7c4ff7f9a7c013a2f Mon Sep 17 00:00:00 2001
From: Benjamin Staffin <benley@gmail.com>
Date: Sat, 22 Jun 2024 11:31:18 -0400
Subject: [PATCH] nixos/ipa: Lower default sssd debug_level (#310662)

debug_level 65510 (0x3f7f0) is _extremely_ verbose, far more than one
would want in normal operation.  Setting these in the default config
also makes it difficult to override in a user config.  Anyone who needs
greater verbosity can add these options to their own sssd config, or
adjust them at runtime with `sssctl debug-level`.
---
 nixos/modules/security/ipa.nix | 2 --
 1 file changed, 2 deletions(-)

diff --git a/nixos/modules/security/ipa.nix b/nixos/modules/security/ipa.nix
index b160d0bc23ef..e746ca75724a 100644
--- a/nixos/modules/security/ipa.nix
+++ b/nixos/modules/security/ipa.nix
@@ -244,7 +244,6 @@ in {
       ldap_user_extra_attrs = mail:mail, sn:sn, givenname:givenname, telephoneNumber:telephoneNumber, lock:nsaccountlock
 
       [sssd]
-      debug_level = 65510
       services = nss, sudo, pam, ssh, ifp
       domains = ${cfg.domain}
 
@@ -256,7 +255,6 @@ in {
       pam_verbosity = 3
 
       [sudo]
-      debug_level = 65510
 
       [autofs]