<def-group>
  <definition class="inventory" id="sssd_conf_uses_ldap" version="1">
    <metadata>
      <title>SSSD is configured to use LDAP</title>
      <affected family="unix">
        <platform>multi_platform_all</platform>
      </affected>
      <description>Identification provider is not set to ad within /etc/sssd/sssd.conf</description>
      <reference ref_id="cpe:/a:sssd-ldap" source="CPE" />
    </metadata>
    <criteria>
      <criterion comment="Identification provider is set to ldap within /etc/sssd/sssd.conf"
      test_ref="test_id_provider_is_set_to_ldap"/>
    </criteria>
  </definition>

  <ind:textfilecontent54_test check="all" check_existence="all_exist"
  comment="SSSD Configuration is set to use LDAP"
  id="test_id_provider_is_set_to_ldap" version="1">
  <ind:object object_ref="object_id_provider_is_set_to_ldap"/>
  </ind:textfilecontent54_test>

  <ind:textfilecontent54_object id="object_id_provider_is_set_to_ldap" version="1">
  <ind:filepath>/etc/sssd/sssd.conf</ind:filepath>
  <ind:pattern operation="pattern match">^[\s]*\[domain\/[^]]*]([^\n\[\]]*\n+)+?[\s]*id_provider[ \t]*=[ \t]*((?i)ldap)[ \t]*$</ind:pattern>
  <ind:instance datatype="int">1</ind:instance>
  </ind:textfilecontent54_object>
</def-group>
