What were you trying to do that didn't work?

During the domain join process on a RHEL server, the parameter config_file_version is automatically added to the sssd.conf file. However, this parameter is not available in the official sssd.conf man page.

What is the impact of this issue to you?

The error could confuse administrators, as the parameter is not part of the man page.

Please provide the package NVR for which the bug is seen:

sssd-2.10.2-3.el10_0.2.x86_64

How reproducible is this bug?:

Always

Steps to reproduce

1. Perform a domain join operation on a RHEL 10 server
2. Run SSSD in debug mode:   # sssd -i -d7
3. Inspect the /etc/sssd/sssd.conf file and verify that the config_file_version parameter is present under the [sssd] section.

       4. The following error message is logged when validating the configuration:

[sssd] [sss_ini_call_validators] (0x0020): [rule/allowed_sssd_options]: Attribute 'config_file_version' is not allowed in section 'sssd'. Check for typos.

Expected results

Seems this option is automatically added in the sssd.conf file during realm join but it is not documented in the man page. 

Actual results

An error is logged in sssd debug logs.