Update plugin docstrings (topic help) to reflect dropped CSV support

https://fedorahosted.org/freeipa/ticket/3352
This commit is contained in:
Petr Viktorin
2013-02-22 17:20:35 +01:00
committed by Martin Kosek
parent 5752b35d16
commit f2f1ed63f5
10 changed files with 21 additions and 19 deletions
+2 -2
View File
@@ -101,10 +101,10 @@ command-line now (see last example).
ipa aci-add --permissions=write --attrs=member --targetgroup=admins --group=editors --prefix=none "Editors manage admins" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --group=editors --prefix=none "Editors manage admins"
Add an ACI that allows members of the admins group to manage the street and zip code of those in the editors group: Add an ACI that allows members of the admins group to manage the street and zip code of those in the editors group:
ipa aci-add --permissions=write --memberof=editors --group=admins --attrs=street,postalcode --prefix=none "admins edit the address of editors" ipa aci-add --permissions=write --memberof=editors --group=admins --attrs=street --attrs=postalcode --prefix=none "admins edit the address of editors"
Add an ACI that allows the admins group manage the street and zipcode of those who work for the boss: Add an ACI that allows the admins group manage the street and zipcode of those who work for the boss:
ipa aci-add --permissions=write --group=admins --attrs=street,postalcode --filter="(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)" --prefix=none "Edit the address of those who work for the boss" ipa aci-add --permissions=write --group=admins --attrs=street --attrs=postalcode --filter="(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)" --prefix=none "Edit the address of those who work for the boss"
Add an entirely new kind of record to IPA that isn't covered by any of the --type options, creating a permission: Add an entirely new kind of record to IPA that isn't covered by any of the --type options, creating a permission:
ipa permission-add --permissions=add --subtree="cn=*,cn=orange,cn=accounts,dc=example,dc=com" --desc="Add Orange Entries" add_orange ipa permission-add --permissions=add --subtree="cn=*,cn=orange,cn=accounts,dc=example,dc=com" --desc="Add Orange Entries" add_orange
+1 -1
View File
@@ -43,7 +43,7 @@ EXAMPLES:
When managing the list of attributes you need to include all attributes When managing the list of attributes you need to include all attributes
in the list, including existing ones. Add postalCode to the list: in the list, including existing ones. Add postalCode to the list:
ipa delegation-mod --attrs=street,postalCode --group=managers --membergroup=employees "managers edit employees' street" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --membergroup=employees "managers edit employees' street"
Display our updated rule: Display our updated rule:
ipa delegation-show "managers edit employees' street" ipa delegation-show "managers edit employees' street"
+2 -2
View File
@@ -68,8 +68,8 @@ EXAMPLES:
To add the "remoteadmins" group to the "localadmins" group: To add the "remoteadmins" group to the "localadmins" group:
ipa group-add-member --groups=remoteadmins localadmins ipa group-add-member --groups=remoteadmins localadmins
Add a list of users to the "localadmins" group: Add multiple users to the "localadmins" group:
ipa group-add-member --users=test1,test2 localadmins ipa group-add-member --users=test1 --users=test2 localadmins
Remove a user from the "localadmins" group: Remove a user from the "localadmins" group:
ipa group-remove-member --users=test2 localadmins ipa group-remove-member --users=test2 localadmins
+1 -1
View File
@@ -58,7 +58,7 @@ EXAMPLES:
the FTP service on any machine from any machine: the FTP service on any machine from any machine:
ipa hbacsvcgroup-add ftpers ipa hbacsvcgroup-add ftpers
ipa hbacsvc-add sftp ipa hbacsvc-add sftp
ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers
ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp
ipa hbacrule-add-user --users=john john_ftp ipa hbacrule-add-user --users=john john_ftp
ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp
+2 -2
View File
@@ -33,14 +33,14 @@ EXAMPLES:
ipa hbacsvcgroup-add --desc="login services" login ipa hbacsvcgroup-add --desc="login services" login
Add members to an HBAC service group: Add members to an HBAC service group:
ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login
Display information about a named group: Display information about a named group:
ipa hbacsvcgroup-show login ipa hbacsvcgroup-show login
Add a new group to the "login" group: Add a new group to the "login" group:
ipa hbacsvcgroup-add --desc="switch users" login ipa hbacsvcgroup-add --desc="switch users" login
ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login ipa hbacsvcgroup-add-member --hbacsvcs=su --hbacsvcs=su-l login
Delete an HBAC service group: Delete an HBAC service group:
ipa hbacsvcgroup-del login ipa hbacsvcgroup-del login
+3 -3
View File
@@ -90,7 +90,7 @@ EXAMPLES:
3. Test explicitly specified HBAC rules: 3. Test explicitly specified HBAC rules:
$ ipa hbactest --user=a1a --host=bar --service=sshd \\ $ ipa hbactest --user=a1a --host=bar --service=sshd \\
--rules=my-second-rule,myrule --rules=myrule --rules=my-second-rule
--------------------- ---------------------
Access granted: False Access granted: False
--------------------- ---------------------
@@ -99,7 +99,7 @@ EXAMPLES:
4. Use all enabled HBAC rules in IPA database + explicitly specified rules: 4. Use all enabled HBAC rules in IPA database + explicitly specified rules:
$ ipa hbactest --user=a1a --host=bar --service=sshd \\ $ ipa hbactest --user=a1a --host=bar --service=sshd \\
--rules=my-second-rule,myrule --enabled --rules=myrule --rules=my-second-rule --enabled
-------------------- --------------------
Access granted: True Access granted: True
-------------------- --------------------
@@ -117,7 +117,7 @@ EXAMPLES:
6. Test all disabled HBAC rules in IPA database + explicitly specified rules: 6. Test all disabled HBAC rules in IPA database + explicitly specified rules:
$ ipa hbactest --user=a1a --host=bar --service=sshd \\ $ ipa hbactest --user=a1a --host=bar --service=sshd \\
--rules=my-second-rule,myrule --disabled --rules=myrule --rules=my-second-rule --disabled
--------------------- ---------------------
Access granted: False Access granted: False
--------------------- ---------------------
+2 -2
View File
@@ -37,8 +37,8 @@ EXAMPLES:
Add another new host group: Add another new host group:
ipa hostgroup-add --desc="Maryland hosts" maryland ipa hostgroup-add --desc="Maryland hosts" maryland
Add members to the hostgroup: Add members to the hostgroup (using Bash brace expansion):
ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore
Add a hostgroup as a member of another hostgroup: Add a hostgroup as a member of another hostgroup:
ipa hostgroup-add-member --hostgroups=baltimore maryland ipa hostgroup-add-member --hostgroups=baltimore maryland
+1 -1
View File
@@ -37,7 +37,7 @@ EXAMPLES:
ipa netgroup-add --desc="NFS admins" admins ipa netgroup-add --desc="NFS admins" admins
Add members to the netgroup: Add members to the netgroup:
ipa netgroup-add-member --users=tuser1,tuser2 admins ipa netgroup-add-member --users=tuser1 --users=tuser2 admins
Remove a member from the netgroup: Remove a member from the netgroup:
ipa netgroup-remove-member --users=tuser2 admins ipa netgroup-remove-member --users=tuser2 admins
+6 -4
View File
@@ -37,12 +37,14 @@ A Self-service permission defines what an object can change in its own entry.
EXAMPLES: EXAMPLES:
Add a self-service rule to allow users to manage their address: Add a self-service rule to allow users to manage their address (using Bash
ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st "Users manage their own address" brace expansion):
ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c,st} "Users manage their own address"
When managing the list of attributes you need to include all attributes When managing the list of attributes you need to include all attributes
in the list, including existing ones. Add telephoneNumber to the list: in the list, including existing ones.
ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber "Users manage their own address" Add telephoneNumber to the list (using Bash brace expansion):
ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} "Users manage their own address"
Display our updated rule: Display our updated rule:
ipa selfservice-show "Users manage their own address" ipa selfservice-show "Users manage their own address"
+1 -1
View File
@@ -36,7 +36,7 @@ EXAMPLES:
ipa sudocmdgroup-del admincmds ipa sudocmdgroup-del admincmds
Manage Sudo Command Group membership, commands: Manage Sudo Command Group membership, commands:
ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim admincmds ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/vim admincmds
Manage Sudo Command Group membership, commands: Manage Sudo Command Group membership, commands:
ipa group-remove-member --sudocmds=/usr/bin/less admincmds ipa group-remove-member --sudocmds=/usr/bin/less admincmds