freeipa/install/share/default-hbac.ldif

# default HBAC policy that grants permission to all services
dn: ipauniqueid=$UUID,cn=hbac,$SUFFIX
changetype: add
objectclass: ipaassociation
objectclass: ipahbacrule
cn: allow_all
accessruletype: allow
usercategory: all
hostcategory: all
sourcehostcategory: all
servicecategory: all
ipaenabledflag: TRUE
description: Allow all users to access any host from any host
# ipauniqueid gets added for us by 389-ds
Create default HBAC rule allowing any user to access any host from any host This is to make initial installation and testing easier. Use the --no_hbac_allow option on the command-line to disable this when doing an install. To remove it from a running server do: ipa hbac-del allow_all 2010-05-04 14:24:54 -05:00			`# default HBAC policy that grants permission to all services`
			`dn: ipauniqueid=$UUID,cn=hbac,$SUFFIX`
			`changetype: add`
			`objectclass: ipaassociation`
			`objectclass: ipahbacrule`
			`cn: allow_all`
			`accessruletype: allow`
			`usercategory: all`
			`hostcategory: all`
			`sourcehostcategory: all`
Add 'all' serviceCategory to default HBAC group and add some default services 2010-05-20 12:50:22 -05:00			`servicecategory: all`
Create default HBAC rule allowing any user to access any host from any host This is to make initial installation and testing easier. Use the --no_hbac_allow option on the command-line to disable this when doing an install. To remove it from a running server do: ipa hbac-del allow_all 2010-05-04 14:24:54 -05:00			`ipaenabledflag: TRUE`
			`description: Allow all users to access any host from any host`
			`# ipauniqueid gets added for us by 389-ds`