2017-09-08 02:07:15 +00:00
|
|
|
---
|
2020-01-18 00:18:09 +00:00
|
|
|
layout: docs
|
|
|
|
|
page_title: auth tune - Command
|
|
|
|
|
sidebar_title: <code>tune</code>
|
2017-09-08 02:07:15 +00:00
|
|
|
description: |-
|
|
|
|
|
The "auth tune" command tunes the configuration options for the auth method at
|
|
|
|
|
the given PATH.
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
# auth tune
|
|
|
|
|
|
|
|
|
|
The `auth tune` command tunes the configuration options for the auth method at
|
|
|
|
|
the given PATH. **The argument corresponds to the PATH where the auth method is
|
|
|
|
|
enabled, not the TYPE!**
|
|
|
|
|
|
|
|
|
|
## Examples
|
|
|
|
|
|
|
|
|
|
Tune the default lease for the auth method enabled at "github/":
|
|
|
|
|
|
2020-05-21 17:18:17 +00:00
|
|
|
```shell-session
|
2017-09-08 02:07:15 +00:00
|
|
|
$ vault auth tune -default-lease-ttl=72h github/
|
|
|
|
|
Success! Tuned the auth method at: github/
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
## Usage
|
|
|
|
|
|
|
|
|
|
The following flags are available in addition to the [standard set of
|
2020-01-22 20:05:41 +00:00
|
|
|
flags](/docs/commands) included on all commands.
|
2017-09-08 02:07:15 +00:00
|
|
|
|
2020-05-21 17:18:17 +00:00
|
|
|
- `-audit-non-hmac-request-keys` `(string: "")` - Comma-separated
|
2020-03-02 16:36:10 +00:00
|
|
|
string or list of keys that will not be HMAC'd by audit devices in the
|
|
|
|
|
request data object.
|
|
|
|
|
|
|
|
|
|
- `-audit-non-hmac-response-keys` `(string: "")` - Comma-separated
|
|
|
|
|
string or list of keys that will not be HMAC'd by audit devices in the
|
|
|
|
|
response data object.
|
|
|
|
|
|
2017-09-08 02:07:15 +00:00
|
|
|
- `-default-lease-ttl` `(duration: "")` - The default lease TTL for this auth
|
|
|
|
|
method. If unspecified, this defaults to the Vault server's globally
|
|
|
|
|
configured default lease TTL, or a previously configured value for the auth
|
|
|
|
|
method.
|
|
|
|
|
|
|
|
|
|
- `-max-lease-ttl` `(duration: "")` - The maximum lease TTL for this auth
|
|
|
|
|
method. If unspecified, this defaults to the Vault server's globally
|
|
|
|
|
configured maximum lease TTL, or a previously configured value for the auth
|
|
|
|
|
method.
|
