From a42059228018839ae2656c27f5b00d96bc935ee3 Mon Sep 17 00:00:00 2001 From: Abhijeet Kasurde Date: Mon, 26 Sep 2016 15:50:44 +0530 Subject: Add fix for no-hbac-allow option in server install This PR brings uniformity in option provided by no-hbac-allow and other options present in IPA server install script Fixes https://fedorahosted.org/freeipa/ticket/6357 Signed-off-by: Abhijeet Kasurde Reviewed-By: Stanislav Laznicka Reviewed-By: Jan Cholasta Reviewed-By: Tomas Krizek --- install/tools/man/ipa-server-install.1 | 2 +- ipaserver/install/server/install.py | 3 ++- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/install/tools/man/ipa-server-install.1 b/install/tools/man/ipa-server-install.1 index f7c192182..69316fb83 100644 --- a/install/tools/man/ipa-server-install.1 +++ b/install/tools/man/ipa-server-install.1 @@ -58,7 +58,7 @@ The starting user and group id number (default random) \fB\-\-idmax\fR=\fIIDMAX\fR The maximum user and group id number (default: idstart+199999). If set to zero, the default value will be used. .TP -\fB\-\-no_hbac_allow\fR +\fB\-\-no-hbac-allow\fR Don't install allow_all HBAC rule. This rule lets any user from any host access any service on any other host. It is expected that users will remove this rule before moving to production. .TP \fB\-\-ignore-topology-disconnect\fR diff --git a/ipaserver/install/server/install.py b/ipaserver/install/server/install.py index 22328ef34..0015a8cb7 100644 --- a/ipaserver/install/server/install.py +++ b/ipaserver/install/server/install.py @@ -1288,7 +1288,8 @@ class Server(BaseServer): no_hbac_allow = Knob( bool, False, description="Don't install allow_all HBAC rule", - cli_name='no_hbac_allow', + cli_name='no-hbac-allow', + cli_aliases=['no_hbac_allow'], ) ignore_topology_disconnect = Knob( -- cgit