diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2010-05-04 15:24:54 -0400 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2010-05-05 14:57:58 -0400 |
| commit | 92e350ca0a1fda0dc9fe6e073dd7afe19a62d9ec (patch) | |
| tree | 84bb163a6a1dde36f43900f5805ffb87e518dc3c /install/tools/man/ipa-server-install.1 | |
| parent | a3d1b1755965c73a758acb1ec4992bf2428fa37b (diff) | |
| download | freeipa-92e350ca0a1fda0dc9fe6e073dd7afe19a62d9ec.tar.gz freeipa-92e350ca0a1fda0dc9fe6e073dd7afe19a62d9ec.tar.xz freeipa-92e350ca0a1fda0dc9fe6e073dd7afe19a62d9ec.zip | |
Create default HBAC rule allowing any user to access any host from any host
This is to make initial installation and testing easier.
Use the --no_hbac_allow option on the command-line to disable this when
doing an install.
To remove it from a running server do: ipa hbac-del allow_all
Diffstat (limited to 'install/tools/man/ipa-server-install.1')
| -rw-r--r-- | install/tools/man/ipa-server-install.1 | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/install/tools/man/ipa-server-install.1 b/install/tools/man/ipa-server-install.1 index edd541633..a64a2eba1 100644 --- a/install/tools/man/ipa-server-install.1 +++ b/install/tools/man/ipa-server-install.1 @@ -101,6 +101,9 @@ The starting group id number (default random) \fB\-\-subject\fR=\fISUBJECT\fR The certificate subject base (default O=IPA) .TP +\fB\-\-no_hbac_allow\fR +Don't install allow_all HBAC rule. This rule lets any user from any host access any service on any other host. It is expected that users will remove this rule before moving to production. +.TP .SH "EXIT STATUS" 0 if the installation was successful |