nevermind, solved it. It is actually HBAC rules, and I have to show
"Indirect Membership" within User Group to show those previously added
rules before upgrade to 4.4.0

Thanks all.

On Tue, Jun 27, 2017 at 4:36 PM, Thomas Lau <> wrote:

> Folks,
> After migrated from FreeIPA 3.3.0 to 4.4.0, all user groups to host groups
> mapping is gone, now 4.4.0 seems introduce this feature call "Netgroups",
> which is currently empty, I haven't hear any user complain, does it mean if
> "Netgroups" is empty all user could access to all machines which enrolled
> on FreeIPA?
FreeIPA-users mailing list --
To unsubscribe send an email to

Reply via email to