freeipa/install/share/default-hbac.ldif

# default HBAC policy that grants permission to all services
dn: ipauniqueid=autogenerate,cn=hbac,$SUFFIX
changetype: add
objectclass: ipaassociation
objectclass: ipahbacrule
cn: allow_all
accessruletype: allow
usercategory: all
hostcategory: all
servicecategory: all
ipaenabledflag: TRUE
description: Allow all users to access any host from any host
ipauniqueid: autogenerate
Create default HBAC rule allowing any user to access any host from any host This is to make initial installation and testing easier. Use the --no_hbac_allow option on the command-line to disable this when doing an install. To remove it from a running server do: ipa hbac-del allow_all 2010-05-04 14:24:54 -05:00			`# default HBAC policy that grants permission to all services`
UUIDs: remove uuid python plugin and let DS always autogenerate merge in remove uuid 2010-10-26 09:26:06 -05:00			`dn: ipauniqueid=autogenerate,cn=hbac,$SUFFIX`
Create default HBAC rule allowing any user to access any host from any host This is to make initial installation and testing easier. Use the --no_hbac_allow option on the command-line to disable this when doing an install. To remove it from a running server do: ipa hbac-del allow_all 2010-05-04 14:24:54 -05:00			`changetype: add`
			`objectclass: ipaassociation`
			`objectclass: ipahbacrule`
			`cn: allow_all`
			`accessruletype: allow`
			`usercategory: all`
			`hostcategory: all`
Add 'all' serviceCategory to default HBAC group and add some default services 2010-05-20 12:50:22 -05:00			`servicecategory: all`
Create default HBAC rule allowing any user to access any host from any host This is to make initial installation and testing easier. Use the --no_hbac_allow option on the command-line to disable this when doing an install. To remove it from a running server do: ipa hbac-del allow_all 2010-05-04 14:24:54 -05:00			`ipaenabledflag: TRUE`
			`description: Allow all users to access any host from any host`
UUIDs: remove uuid python plugin and let DS always autogenerate merge in remove uuid 2010-10-26 09:26:06 -05:00			`ipauniqueid: autogenerate`
Create default HBAC rule allowing any user to access any host from any host This is to make initial installation and testing easier. Use the --no_hbac_allow option on the command-line to disable this when doing an install. To remove it from a running server do: ipa hbac-del allow_all 2010-05-04 14:24:54 -05:00