Re: [Freeipa-users] No ad users in web gui

2016-12-01 Thread Alexander Bokovoy
Please keep freeipa-users@ in CC: On to, 01 joulu 2016, Denis Müller wrote: Sorry, but i still do not understand how can i apply a single HAC-Rule to a single user. Editing a HBAC-Rule, there is no option to select an ad_user. As I said, there wouldn't any. The concept is that you need to have

Re: [Freeipa-users] No ad users in web gui

2016-12-01 Thread Alexander Bokovoy
On to, 01 joulu 2016, Denis Müller wrote: Hello Alexander, thank you for reply. As i understand, working with ad users/groups works this way: ad_users => ad_users_external_group => ipa_users_group So i can manage ipa_users_group to provide Sudo Rules etc. But how can i provide rules to a

Re: [Freeipa-users] No ad users in web gui

2016-12-01 Thread Alexander Bokovoy
On to, 01 joulu 2016, Alexander Bokovoy wrote: On to, 01 joulu 2016, Denis Müller wrote: Hello Ipa-users, i established successful trust to an domain controller and able to get ssh working. AD users are able to log into ipa-domain via ssh. But fortunately i can't see those users in the web

Re: [Freeipa-users] No ad users in web gui

2016-12-01 Thread Alexander Bokovoy
On to, 01 joulu 2016, Denis Müller wrote: Hello Ipa-users, i established successful trust to an domain controller and able to get ssh working. AD users are able to log into ipa-domain via ssh. But fortunately i can't see those users in the web gui. What im i doing wrong? The only thing you are