On Wed, 2011-08-17 at 11:56 -0400, Rob Crittenden wrote:
> You should be able to specify hosts that aren't in IPA in HBAC source
> host rules. This adds support for it.
> ticket https://fedorahosted.org/freeipa/ticket/1574
ACK. Works fine.
Although, I am thinking that we now have the same algorithm (add
user/host as external when not found in LDAP) for both hbac and
sudorule. We may think about consolidating it so that we don't have
Freeipa-devel mailing list