validate_system_config_mappings

Function validate_system_config_mappings 

Source
fn validate_system_config_mappings(
    admin_secret_handling: &AdministrativeSecretHandling,
) -> impl FnOnce(&BTreeSet<SystemUserMapping>, &()) -> Result + '_
Expand description

Validates a set of SystemUserMapping objects against AdministrativeSecretHandling.

Ensures that value is not empty.

Ensures that in mappings there are

  • no duplicate system users
  • no duplicate SSH authorized keys (by comparing the actual SSH public keys)
  • enough shareholders for SSS, if SSS is configured in admin_secret_handling
  • no shareholders for SSS, if SSS is not configured in admin_secret_handling

ยงErrors

Returns an error if there are

  • duplicate system users
  • duplicate SSH authorized keys (by comparing the actual SSH public keys)
  • not enough shareholders for SSS, if SSS is configured in admin_secret_handling
  • shareholders for SSS, if SSS is not configured in admin_secret_handling