Re: [Freeipa-users] Inconsistant results with HBAC and SSH?

2016-05-27 Thread Jakub Hrozek
On Fri, May 27, 2016 at 01:10:40AM +, Simpson Lachlan wrote: > > With the “allow all” HBAC rule enabled, we have no trouble logging in to any > > machine via ssh. When we disable the “allow all” rule and make specific per- > > machine rules (as per the idea of ‘host based’ in HBAC), we get > >

Re: [Freeipa-users] Inconsistant results with HBAC and SSH?

2016-05-26 Thread Simpson Lachlan
> With the “allow all” HBAC rule enabled, we have no trouble logging in to any > machine via ssh. When we disable the “allow all” rule and make specific per- > machine rules (as per the idea of ‘host based’ in HBAC), we get unpredictable > results, primarily resulting in an inability to login via s

[Freeipa-users] Inconsistant results with HBAC and SSH?

2016-05-26 Thread Simpson Lachlan
With the “allow all” HBAC rule enabled, we have no trouble logging in to any machine via ssh. When we disable the “allow all” rule and make specific per-machine rules (as per the idea of ‘host based’ in HBAC), we get unpredictable results, primarily resulting in an inability to login via ssh. T