[Freeipa-users] HBAC issues

2012-01-05 Thread Erinn Looney-Triggs
I am trying to solve an issue that seems like it should be obvious but is not, to me at least. I am trying to allow a user to log into a single host, via GDM. I have configured a HBAC rule that allows access to the host from the host (actually to the group with the host in it from the same

Re: [Freeipa-users] HBAC issues

2012-01-05 Thread Stephen Gallagher
On Thu, 2012-01-05 at 11:35 -0900, Erinn Looney-Triggs wrote: I am trying to solve an issue that seems like it should be obvious but is not, to me at least. I am trying to allow a user to log into a single host, via GDM. I have configured a HBAC rule that allows access to the host from the

Re: [Freeipa-users] HBAC issues

2012-01-05 Thread Erinn Looney-Triggs
On 01/05/2012 11:54 AM, Stephen Gallagher wrote: On Thu, 2012-01-05 at 11:48 -0900, Erinn Looney-Triggs wrote: Yes that look about right, not able to confirm 100%, but that is probably the issue. We're looking into it. However, I should point out that using srchost is a very unreliable

Re: [Freeipa-users] HBAC issues

2012-01-05 Thread Dmitri Pal
On 01/05/2012 05:07 PM, Erinn Looney-Triggs wrote: On 01/05/2012 11:54 AM, Stephen Gallagher wrote: On Thu, 2012-01-05 at 11:48 -0900, Erinn Looney-Triggs wrote: Yes that look about right, not able to confirm 100%, but that is probably the issue. We're looking into it. However, I should

Re: [Freeipa-users] HBAC issues

2012-01-05 Thread Stephen Gallagher
On Jan 5, 2012, at 5:48 PM, Erinn Looney-Triggs erinn.looneytri...@gmail.com wrote: On 01/05/2012 11:54 AM, Stephen Gallagher wrote: On Thu, 2012-01-05 at 11:48 -0900, Erinn Looney-Triggs wrote: Yes that look about right, not able to confirm 100%, but that is probably the issue. We're

Re: [Freeipa-users] HBAC issues

2012-01-05 Thread JR Aquino
On Jan 5, 2012, at 3:14 PM, Stephen Gallagher sgall...@redhat.com wrote: On Jan 5, 2012, at 5:48 PM, Erinn Looney-Triggs erinn.looneytri...@gmail.com wrote: On 01/05/2012 11:54 AM, Stephen Gallagher wrote: On Thu, 2012-01-05 at 11:48 -0900, Erinn Looney-Triggs wrote: Yes that look