2
0
mirror of https://gitlab.isc.org/isc-projects/kea synced 2025-08-31 22:15:23 +00:00

[2005] clarify "config add" for adding a new ACL rule with a value

This commit is contained in:
JINMEI Tatuya
2012-06-18 15:55:41 -07:00
parent c0fa5a1b01
commit 1f195b1c22

View File

@@ -2109,8 +2109,9 @@ what is XfroutClient xfr_client??
Multiple rules can be specified in the ACL, and an ACL rule Multiple rules can be specified in the ACL, and an ACL rule
can consist of multiple constraints, such as a combination of can consist of multiple constraints, such as a combination of
IP address and TSIG. IP address and TSIG.
The following configuration sequence will add to the previous The following configuration sequence will add a new rule to
ACL a rule that allows update requests sent from a client ACL created in the above example. This additional rule
allows update requests sent from a client
using TSIG key name of "key.example" and has an IPv6 address of ::1. using TSIG key name of "key.example" and has an IPv6 address of ::1.
<screen> <screen>
&gt; <userinput>config add DDNS/zones[0]/update_acl {"action": "ACCEPT", "from": "::1", "key": "key.example"}</userinput> &gt; <userinput>config add DDNS/zones[0]/update_acl {"action": "ACCEPT", "from": "::1", "key": "key.example"}</userinput>
@@ -2119,6 +2120,12 @@ DDNS/zones[0]/update_acl[0] {"action": "ACCEPT", "key": "key.example.org"} a
DDNS/zones[0]/update_acl[1] {"action": "ACCEPT", "from": "::1", "key": "key.example"} any (modified) DDNS/zones[0]/update_acl[1] {"action": "ACCEPT", "from": "::1", "key": "key.example"} any (modified)
&gt; <userinput>config commit</userinput> &gt; <userinput>config commit</userinput>
</screen> </screen>
(Note the "add" in the first line. Before this sequence, we
have had only entry in zones[0]/update_acl. The "add" command
with a value (rule) adds a new entry and sets it to the given rule.
Due to a limitation of the current implementation, it doesn't
work if you first try to just add a new entry and then set it to
a given rule).
</para> </para>
<note><simpara> <note><simpara>