[Freeipa-users] Re: HBAC and external groups (AD trust)

2020-10-22 Thread Alexander Bokovoy via FreeIPA-users
On to, 22 loka 2020, Giulio Casella via FreeIPA-users wrote: Thanks, this is clarifying the scenario. So the only way to make it work is to have external group belonging to a posix group. And use posix group in HBAC definition. Am I right? That's what I wrote already in my answer, so yes.

[Freeipa-users] Re: HBAC and external groups (AD trust)

2020-10-22 Thread Giulio Casella via FreeIPA-users
Thanks, this is clarifying the scenario. So the only way to make it work is to have external group belonging to a posix group. And use posix group in HBAC definition. Am I right? Ciao, gc On 22/10/2020 13:13, Alexander Bokovoy via FreeIPA-users wrote: > On to, 22 loka 2020, Giulio Casella via

[Freeipa-users] Re: HBAC and external groups (AD trust)

2020-10-22 Thread Alexander Bokovoy via FreeIPA-users
On to, 22 loka 2020, Giulio Casella via FreeIPA-users wrote: Hi, I have a IPA setup, in trust with active directory. I noticed a strange behaviour in HBAC. In details: I have a group ("extgroup"), defined as external, containing an active directory user ("u...@ad.dom.ain"). I defined a HBAC