mirror of
https://github.com/ovh/the-bastion.git
synced 2025-02-27 17:14:14 +08:00
67 lines
1.8 KiB
ReStructuredText
67 lines
1.8 KiB
ReStructuredText
=========================
|
|
accountAddPersonalAccess
|
|
=========================
|
|
|
|
Add a personal server access to an account
|
|
==========================================
|
|
|
|
|
|
.. admonition:: usage
|
|
:class: cmdusage
|
|
|
|
--osh accountAddPersonalAccess --account ACCOUNT --host HOST [OPTIONS]
|
|
|
|
.. program:: accountAddPersonalAccess
|
|
|
|
|
|
.. option:: --account
|
|
|
|
Bastion account to add the access to
|
|
|
|
.. option:: --host IP|HOST|IP/MASK
|
|
|
|
Server to add access to
|
|
|
|
.. option:: --user USER
|
|
|
|
Remote login to use, if you want to allow any login, use --user-any
|
|
|
|
.. option:: --user-any
|
|
|
|
Allow access with any remote login
|
|
|
|
.. option:: --port PORT
|
|
|
|
Remote SSH port to use, if you want to allow any port, use --port-any
|
|
|
|
.. option:: --port-any
|
|
|
|
Allow access to all remote ports
|
|
|
|
.. option:: --scpup
|
|
|
|
Allow SCP upload, you--bastion-->server (omit --user in this case)
|
|
|
|
.. option:: --scpdown
|
|
|
|
Allow SCP download, you<--bastion--server (omit --user in this case)
|
|
|
|
.. option:: --force-key FINGERPRINT
|
|
|
|
Only use the key with the specified fingerprint to connect to the server (cf selfListEgressKeys)
|
|
|
|
.. option:: --force-password HASH
|
|
|
|
Only use the password with the specified hash to connect to the server (cf accountListPasswords)
|
|
|
|
.. option:: --ttl SECONDS|DURATION
|
|
|
|
Specify a number of seconds (or a duration string, such as "1d7h8m") after which the access will automatically expire
|
|
|
|
.. option:: --comment "'ANY TEXT'"
|
|
|
|
Add a comment alongside this server. Quote it twice as shown if you're under a shell.
|
|
|
|
|
|
The access will work only if one of the account's personal egress public key has been copied to the remote server.
|
|
To get the list of an account's personal egress public keys, see ``accountListEgressKeyss`` and ``selfListEgressKeys``.
|