diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2015-03-16 11:48:39 +0100 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2015-03-24 21:03:41 +0100 |
| commit | 6dff95bdfe437afc0b62b5270d0d84140981c786 (patch) | |
| tree | 887f95d15a683e3677d9dfa4e396ba1f9218eee7 /src/man | |
| parent | fdfe33975cd902bf7a334e49f2667f6346c4e6ae (diff) | |
| download | sssd-6dff95bdfe437afc0b62b5270d0d84140981c786.tar.gz sssd-6dff95bdfe437afc0b62b5270d0d84140981c786.tar.xz sssd-6dff95bdfe437afc0b62b5270d0d84140981c786.zip | |
IPA: Remove the ipa_hbac_treat_deny_as option
https://fedorahosted.org/sssd/ticket/2603
Since deny rules are no longer supported on the server, the client
should no longer support them either. Remove the option.
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Diffstat (limited to 'src/man')
| -rw-r--r-- | src/man/sssd-ipa.5.xml | 28 |
1 files changed, 0 insertions, 28 deletions
diff --git a/src/man/sssd-ipa.5.xml b/src/man/sssd-ipa.5.xml index 77cb9aac5..0716b6235 100644 --- a/src/man/sssd-ipa.5.xml +++ b/src/man/sssd-ipa.5.xml @@ -500,34 +500,6 @@ </varlistentry> <varlistentry> - <term>ipa_hbac_treat_deny_as (string)</term> - <listitem> - <para> - This option specifies how to treat the deprecated - DENY-type HBAC rules. As of FreeIPA v2.1, DENY - rules are no longer supported on the server. All - users of FreeIPA will need to migrate their rules - to use only the ALLOW rules. The client will - support two modes of operation during this - transition period: - </para> - <para> - <emphasis>DENY_ALL</emphasis>: If any HBAC DENY - rules are detected, all users will be denied - access. - </para> - <para> - <emphasis>IGNORE</emphasis>: SSSD will ignore any - DENY rules. Be very careful with this option, as - it may result in opening unintended access. - </para> - <para> - Default: DENY_ALL - </para> - </listitem> - </varlistentry> - - <varlistentry> <term>ipa_server_mode (boolean)</term> <listitem> <para> |