restricted plugins

• accountAddPersonalAccess
  • Add a personal server access to an account
  • Plugin configuration
    • Options
    • Example
• accountCreate
  • Create a new bastion account
• accountDelPersonalAccess
  • Remove a personal server access from an account
• accountDelete
  • Delete an account from the bastion
• accountFreeze
  • Freeze an account, to prevent it from connecting
• accountGeneratePassword
  • Generate a new egress password for an account
• accountGrantCommand
  • Grant access to a restricted command
• accountInfo
  • Display some information about an account
  • Usage examples
  • Output example
• accountList
  • List the bastion accounts
• accountListAccesses
  • View the expanded access list of a given bastion account
• accountListEgressKeys
  • List the public egress keys of an account
• accountListIngressKeys
  • List the public ingress keys of an account
• accountListPasswords
  • List the hashes and metadata of the egress passwords associated to an account
• accountMFAResetPassword
  • Remove the UNIX password of an account
• accountMFAResetTOTP
  • Remove the TOTP configuration of an account
• accountModify
  • Modify an account configuration
• accountPIV
  • Modify the PIV policy for the ingress keys of an account
    • Possible POLICY values:
• accountRevokeCommand
  • Revoke access to a restricted command
• accountUnexpire
  • Unexpire an inactivity-expired account
• accountUnfreeze
  • Unfreeze a frozen account
• accountUnlock
  • Unlock an account locked by pam_tally, pam_tally2 or pam_faillock
• groupCreate
  • Create a group
• groupDelete
  • Delete a group
• realmCreate
  • Declare and create a new trusted realm
• realmDelete
  • Delete a bastion realm
• realmInfo
  • Display information about a bastion realm
• realmList
  • List the bastions realms
• rootListIngressKeys
  • List the public keys to connect as root on this bastion
• selfAddPersonalAccess
  • Add a personal server access to your account
  • Plugin configuration
    • Options
    • Example
• selfDelPersonalAccess
  • Remove a personal server access from your account
• whoHasAccessTo
  • List the accounts that have access to a given server