summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAbhijeet Kasurde <akasurde@redhat.com>2016-09-26 15:50:44 +0530
committerMartin Basti <mbasti@redhat.com>2016-10-18 17:34:12 +0200
commita42059228018839ae2656c27f5b00d96bc935ee3 (patch)
tree1fd5805a7bf11be7ccac2e9072813ef7a26c0d12
parent5710ecddcaea7b00fbbc2ee24b845f7a4ac90f57 (diff)
downloadfreeipa-a42059228018839ae2656c27f5b00d96bc935ee3.tar.gz
freeipa-a42059228018839ae2656c27f5b00d96bc935ee3.tar.xz
freeipa-a42059228018839ae2656c27f5b00d96bc935ee3.zip
Add fix for no-hbac-allow option in server install
This PR brings uniformity in option provided by no-hbac-allow and other options present in IPA server install script Fixes https://fedorahosted.org/freeipa/ticket/6357 Signed-off-by: Abhijeet Kasurde <akasurde@redhat.com> Reviewed-By: Stanislav Laznicka <slaznick@redhat.com> Reviewed-By: Jan Cholasta <jcholast@redhat.com> Reviewed-By: Tomas Krizek <tkrizek@redhat.com>
-rw-r--r--install/tools/man/ipa-server-install.12
-rw-r--r--ipaserver/install/server/install.py3
2 files changed, 3 insertions, 2 deletions
diff --git a/install/tools/man/ipa-server-install.1 b/install/tools/man/ipa-server-install.1
index f7c192182..69316fb83 100644
--- a/install/tools/man/ipa-server-install.1
+++ b/install/tools/man/ipa-server-install.1
@@ -58,7 +58,7 @@ The starting user and group id number (default random)
\fB\-\-idmax\fR=\fIIDMAX\fR
The maximum user and group id number (default: idstart+199999). If set to zero, the default value will be used.
.TP
-\fB\-\-no_hbac_allow\fR
+\fB\-\-no-hbac-allow\fR
Don't install allow_all HBAC rule. This rule lets any user from any host access any service on any other host. It is expected that users will remove this rule before moving to production.
.TP
\fB\-\-ignore-topology-disconnect\fR
diff --git a/ipaserver/install/server/install.py b/ipaserver/install/server/install.py
index 22328ef34..0015a8cb7 100644
--- a/ipaserver/install/server/install.py
+++ b/ipaserver/install/server/install.py
@@ -1288,7 +1288,8 @@ class Server(BaseServer):
no_hbac_allow = Knob(
bool, False,
description="Don't install allow_all HBAC rule",
- cli_name='no_hbac_allow',
+ cli_name='no-hbac-allow',
+ cli_aliases=['no_hbac_allow'],
)
ignore_topology_disconnect = Knob(