On 03/24/2016 10:24 AM, Jan Pazdziora wrote: > On Wed, Mar 23, 2016 at 04:41:49PM +0100, Lukáš Hellebrandt wrote: ... > You present two solutions to the problem -- deny rules, and regular > expressions.
For the record, HBAC deny rules is something we will want to avoid. Deny HBAC rules were removed in the past for good reasons: https://www.redhat.com/archives/freeipa-users/2011-June/msg00256.html https://fedorahosted.org/freeipa/ticket/1432 Martin -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
