On Thu, 10 Sep 2015, Alexander Frolushkin wrote:
so it may work or may not work - we need to try such configuration
first. I hoped somebody already do this and may share the experience :)
BTW, I already do some part of this work before - for native IPA users
it works, but of cause, without HBAC.
As HBAC currently is done at client side, and there is no such support
for HP-UX, nothing can change here.
For combined AD and IPA users just use cn=compat subtrees like
'ipa-advise' rules suggest.
It would be great if you would be able to update instructions for HP-UX
setup we have on the wiki --
/ Alexander Bokovoy
Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project