Re: [Freeipa-users] sssd 1.14.1, HBAC still not working?

2016-10-11 Thread Jakub Hrozek
On Tue, Oct 11, 2016 at 03:28:55PM +1100, Lachlan Musicman wrote: > After further testing, I've discovered that the dev system wasn't working > as well as I thought it was: HBAC and sshd don't seem to be playing well > together on one server, but fine on the other? > > ie, I can run the same

Re: [Freeipa-users] sssd 1.14.1, HBAC still not working?

2016-10-10 Thread Lachlan Musicman
After further testing, I've discovered that the dev system wasn't working as well as I thought it was: HBAC and sshd don't seem to be playing well together on one server, but fine on the other? ie, I can run the same commands from both ipa-server and ipa-client: ipa hbactest --user=user1

[Freeipa-users] sssd 1.14.1, HBAC still not working?

2016-10-10 Thread Lachlan Musicman
Hola, I've set up a test domain that's as much as possible the same as the prod domain, and successfully got a one way trust against the AD: cantos 7.2, ipa 4.2.0-15/api2.156, sssd (copr) 1.14.1-3 On that test domain I believe I have HBAC working successfully. Once I could show that it was