URL: https://github.com/freeipa/freeipa/pull/116 Author: Akasurde Title: #116: Added fix for no-hbac-allow option in server install script Action: opened
PR body: """ Fixes: https://fedorahosted.org/freeipa/ticket/6357 Signed-off-by: Abhijeet Kasurde <akasu...@redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/116/head:pr116 git checkout pr116
From 42bc68b430aba8b02ac576a302ab870683e9fc64 Mon Sep 17 00:00:00 2001 From: Abhijeet Kasurde <akasu...@redhat.com> Date: Mon, 26 Sep 2016 15:50:44 +0530 Subject: [PATCH] Added fix for no-hbac-allow option in server install script Fixes: https://fedorahosted.org/freeipa/ticket/6357 Signed-off-by: Abhijeet Kasurde <akasu...@redhat.com> --- install/tools/man/ipa-server-install.1 | 2 +- ipaserver/install/server/install.py | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/install/tools/man/ipa-server-install.1 b/install/tools/man/ipa-server-install.1 index f7c1921..69316fb 100644 --- a/install/tools/man/ipa-server-install.1 +++ b/install/tools/man/ipa-server-install.1 @@ -58,7 +58,7 @@ The starting user and group id number (default random) \fB\-\-idmax\fR=\fIIDMAX\fR The maximum user and group id number (default: idstart+199999). If set to zero, the default value will be used. .TP -\fB\-\-no_hbac_allow\fR +\fB\-\-no-hbac-allow\fR Don't install allow_all HBAC rule. This rule lets any user from any host access any service on any other host. It is expected that users will remove this rule before moving to production. .TP \fB\-\-ignore-topology-disconnect\fR diff --git a/ipaserver/install/server/install.py b/ipaserver/install/server/install.py index ff50bef..053a94d 100644 --- a/ipaserver/install/server/install.py +++ b/ipaserver/install/server/install.py @@ -1294,7 +1294,7 @@ def idmax(self): no_hbac_allow = Knob( bool, False, description="Don't install allow_all HBAC rule", - cli_name='no_hbac_allow', + cli_name='no-hbac-allow', ) ignore_topology_disconnect = Knob(
-- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
