Explore the use of config snippets to configure SSSD

[FroggyFlox]

SSSD supports the use of configuration snippets in a conf.d directory to override the defaults set in the main sssd.conf file. These are located in /etc/sssd/conf.d/ and should be available in the version of SSSD shipped in Tumbleweed and Leap 15.6 (the latter needs confirmation, though).
See manpage: https://manpages.opensuse.org/Tumbleweed/sssd/sssd.conf.5.en.html#CONFIGURATION_SNIPPETS_FROM_INCLUDE_DIRECTORY

This could be an interesting alternative to our current approach. We indeed have a few dedicated functions in system.directory_services that edit sssd.conf "in place". This can be rather cumbersome and prone to mishandling. The use of configuration snippets may allow for an easier and thus more reliable/robust way to implement the same settings we currently need.

[Hooverdan96]

I think you can assume, that this is available in Leap 15.6 as well, if not even earlier. A look at the sssd repository seems to indicate that snippets were not supported prior to 1.4 (see last entry under SSSD/sssd#3289).

Since Leap (2.9.5) and TW (2.10.1) are way beyond that I would expect that the snippets are supported on either flavor.