On Mon, 25 Jan 2016, Birnbaum, Warren (ETW) wrote:
Thanks Alexander. Is there a place where there are example pam stacks that work with active directory and hbac?
Defaults in RHEL/Fedora should be enough: - install RHEL/Fedora, - apply ipa-client-install,
then you get proper setup. That's what is tested and supported. ipa-client-install would run authconfig utility with correct parameters to set PAM stack properly. -- / Alexander Bokovoy -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project