Make a resource wait for something else to finish before editing a file
I'm trying to use the domainjoin module from Github to join a RedHat box to an active directory domain. This module creates sssd.conf among other files. The module doesn't provide the simpleallowgroups field for sssd.conf, so I need to edit the file using something like inisetting (again from Github) to add the line.
I need to be able to control the order of execution so that the domainjoin module does all its work before I attempt editing sssd.conf in the manifest. I've tried a number of things, none of which have worked so far. Generally, trying to refer to either domainjoin in a Require clause fails due to an unknown resource type. I've also tried to check the existence of a script that domain_join creates as a trigger for editing sssd.conf, but it didn't help.
So I'm looking for ideas on how to make the inisetting resource wait on the completion of domainjoin before making its edit sssd.conf.