diff options
| author | Alexander Bokovoy <abokovoy@redhat.com> | 2012-01-10 11:15:26 +0200 |
|---|---|---|
| committer | Alexander Bokovoy <abokovoy@redhat.com> | 2012-01-13 18:22:57 +0200 |
| commit | 1e04e9f02978592d861895bd14e8b3a2ee2c7100 (patch) | |
| tree | 527a5e1063e59ccad5541d29c6633e4a8ac30e8b /API.txt | |
| parent | 0d3cd4c3840c1e67adc85f17debe0f6c5f04b309 (diff) | |
| download | freeipa-1e04e9f02978592d861895bd14e8b3a2ee2c7100.tar.gz freeipa-1e04e9f02978592d861895bd14e8b3a2ee2c7100.tar.xz freeipa-1e04e9f02978592d861895bd14e8b3a2ee2c7100.zip | |
Allow hbactest to work with HBAC rules exceeding default IPA limits
When multiple HBAC rules are defined, IPA default limits to retrieve
objects may limit the scope of HBAC testing. To allow full range of rules
to be tested support for --sizelimit option is added.
In addition, when --rules option is specified, make sure only those rules
are retrieved regardless total number of rules defined. This should also
speed up HBAC test performance for real life scenarios when few new rules
are added to large collection of rules.
https://fedorahosted.org/freeipa/ticket/2230
Diffstat (limited to 'API.txt')
| -rw-r--r-- | API.txt | 3 |
1 files changed, 2 insertions, 1 deletions
@@ -1634,7 +1634,7 @@ output: Output('summary', (<type 'unicode'>, <type 'NoneType'>), None) output: Entry('result', <type 'dict'>, Gettext('A dictionary representing an LDAP entry', domain='ipa', localedir=None)) output: Output('value', <type 'unicode'>, None) command: hbactest -args: 0,8,6 +args: 0,9,6 option: Str('user', cli_name='user', primary_key=True) option: Str('sourcehost?', cli_name='srchost') option: Str('targethost', cli_name='host') @@ -1643,6 +1643,7 @@ option: Str('rules*', cli_name='rules', csv=True) option: Flag('nodetail?', autofill=True, cli_name='nodetail', default=False) option: Flag('enabled?', autofill=True, cli_name='enabled', default=False) option: Flag('disabled?', autofill=True, cli_name='disabled', default=False) +option: Int('sizelimit?', autofill=False, minvalue=0) output: Output('summary', (<type 'unicode'>, <type 'NoneType'>), None) output: Output('warning', (<type 'list'>, <type 'tuple'>, <type 'NoneType'>), None) output: Output('matched', (<type 'list'>, <type 'tuple'>, <type 'NoneType'>), None) |