diff options
author | Abhijeet Kasurde <akasurde@redhat.com> | 2016-09-26 15:50:44 +0530 |
---|---|---|
committer | Martin Basti <mbasti@redhat.com> | 2016-10-18 17:34:12 +0200 |
commit | a42059228018839ae2656c27f5b00d96bc935ee3 (patch) | |
tree | 1fd5805a7bf11be7ccac2e9072813ef7a26c0d12 | |
parent | 5710ecddcaea7b00fbbc2ee24b845f7a4ac90f57 (diff) | |
download | freeipa-a42059228018839ae2656c27f5b00d96bc935ee3.tar.gz freeipa-a42059228018839ae2656c27f5b00d96bc935ee3.tar.xz freeipa-a42059228018839ae2656c27f5b00d96bc935ee3.zip |
Add fix for no-hbac-allow option in server install
This PR brings uniformity in option provided by no-hbac-allow
and other options present in IPA server install script
Fixes https://fedorahosted.org/freeipa/ticket/6357
Signed-off-by: Abhijeet Kasurde <akasurde@redhat.com>
Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Reviewed-By: Tomas Krizek <tkrizek@redhat.com>
-rw-r--r-- | install/tools/man/ipa-server-install.1 | 2 | ||||
-rw-r--r-- | ipaserver/install/server/install.py | 3 |
2 files changed, 3 insertions, 2 deletions
diff --git a/install/tools/man/ipa-server-install.1 b/install/tools/man/ipa-server-install.1 index f7c192182..69316fb83 100644 --- a/install/tools/man/ipa-server-install.1 +++ b/install/tools/man/ipa-server-install.1 @@ -58,7 +58,7 @@ The starting user and group id number (default random) \fB\-\-idmax\fR=\fIIDMAX\fR The maximum user and group id number (default: idstart+199999). If set to zero, the default value will be used. .TP -\fB\-\-no_hbac_allow\fR +\fB\-\-no-hbac-allow\fR Don't install allow_all HBAC rule. This rule lets any user from any host access any service on any other host. It is expected that users will remove this rule before moving to production. .TP \fB\-\-ignore-topology-disconnect\fR diff --git a/ipaserver/install/server/install.py b/ipaserver/install/server/install.py index 22328ef34..0015a8cb7 100644 --- a/ipaserver/install/server/install.py +++ b/ipaserver/install/server/install.py @@ -1288,7 +1288,8 @@ class Server(BaseServer): no_hbac_allow = Knob( bool, False, description="Don't install allow_all HBAC rule", - cli_name='no_hbac_allow', + cli_name='no-hbac-allow', + cli_aliases=['no_hbac_allow'], ) ignore_topology_disconnect = Knob( |