sssd.conf template is not marked as sensitive

[drzewiec]

Brief Description

When the cookbook applies the sssd.conf template, it is not marked as sensitive even if the ldap_default_authtok attribute is set. This results in credentials showing up in Chef logs.

Cookbook version

5.2.6

Chef-Infra Version

18.3.0

Platform details

Rocky Linux 8.8

Steps To Reproduce

Set node['sssd_ldap']['sssd_conf']['default_ldap_authtok'] and run the cookbook.

Expected behavior

When the default_ldap_authtok attribute is set, the sssd.conf template resource should get marked sensitive and not include a diff output.