summaryrefslogtreecommitdiffstats
path: root/src/man
diff options
context:
space:
mode:
authorJakub Hrozek <jhrozek@redhat.com>2015-03-16 11:48:39 +0100
committerJakub Hrozek <jhrozek@redhat.com>2015-03-24 21:03:41 +0100
commit6dff95bdfe437afc0b62b5270d0d84140981c786 (patch)
tree887f95d15a683e3677d9dfa4e396ba1f9218eee7 /src/man
parentfdfe33975cd902bf7a334e49f2667f6346c4e6ae (diff)
downloadsssd-6dff95bdfe437afc0b62b5270d0d84140981c786.tar.gz
sssd-6dff95bdfe437afc0b62b5270d0d84140981c786.tar.xz
sssd-6dff95bdfe437afc0b62b5270d0d84140981c786.zip
IPA: Remove the ipa_hbac_treat_deny_as option
https://fedorahosted.org/sssd/ticket/2603 Since deny rules are no longer supported on the server, the client should no longer support them either. Remove the option. Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Diffstat (limited to 'src/man')
-rw-r--r--src/man/sssd-ipa.5.xml28
1 files changed, 0 insertions, 28 deletions
diff --git a/src/man/sssd-ipa.5.xml b/src/man/sssd-ipa.5.xml
index 77cb9aac5..0716b6235 100644
--- a/src/man/sssd-ipa.5.xml
+++ b/src/man/sssd-ipa.5.xml
@@ -500,34 +500,6 @@
</varlistentry>
<varlistentry>
- <term>ipa_hbac_treat_deny_as (string)</term>
- <listitem>
- <para>
- This option specifies how to treat the deprecated
- DENY-type HBAC rules. As of FreeIPA v2.1, DENY
- rules are no longer supported on the server. All
- users of FreeIPA will need to migrate their rules
- to use only the ALLOW rules. The client will
- support two modes of operation during this
- transition period:
- </para>
- <para>
- <emphasis>DENY_ALL</emphasis>: If any HBAC DENY
- rules are detected, all users will be denied
- access.
- </para>
- <para>
- <emphasis>IGNORE</emphasis>: SSSD will ignore any
- DENY rules. Be very careful with this option, as
- it may result in opening unintended access.
- </para>
- <para>
- Default: DENY_ALL
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
<term>ipa_server_mode (boolean)</term>
<listitem>
<para>