Ben Aveling wrote:
That makes sense. The only entries in my test sssd.conf were the new
domain, so yes, in effect, the whole file was ignored/removed.
Suggesting it might have worked if I'd added ipv6_only somewhere else?
Unfortunately according to sssd.conf(5) lookup_family_order is only
available in the domain section.
I think the most generic new cli option in ipa-client-install would load
the existing domain and merely update it rather than creating a new one
so this, or other configuration would be allowed. It also puts the onus
on the end user to ensure to avoid conflicting configuration, etc.
rob