Re: [Freeipa-users] pam_hbac for aix

2017-03-06 Thread Jakub Hrozek 
On Mon, Mar 06, 2017 at 12:36:20PM +0100, Iulian Roman wrote:
> On Mon, Mar 6, 2017 at 12:20 PM, Jakub Hrozek  wrote:
> 
> > On Mon, Mar 06, 2017 at 10:59:12AM +0100, Iulian Roman wrote:
> > > Hello,
> > >
> > > Does anyone know what is the status with the support for AIX in the
> > > pam_hbac tool ? I've heard from a RH presentation that it is available,
> > > although on the project site it does not seem to be supported yet.
> > >
> > > I would like to know if there are any plans in that direction ,  because
> > > our migrations of thousands of AIX machines to IPA is conditioned by the
> > > availability of pam_hbac.  The HBAC rules/policy design depends as well
> > on
> > > the method you use to parse the rules.
> >
> > It's in progress, but delayed due to the current work we are doing for
> > RHEL-7.4. I've merged HP-UX support a couple of weeks ago and AIX
> > support is next on the list.
> >
> > Any chance we can prioritize  that by creating  an RFE ?  We have quite a
> big environment and it would simplify a lot the access control if we can
> make use of pam_hbac.

We already have:
https://github.com/jhrozek/pam_hbac/issues/74

> 
> > If you'd like to help with the port, any help is appreciated :-)
> >
> > I am willing to , at least with testing it on different OS versions. If
> there is anything else i can do , please let me know.

Testing patches when there are would be nice. You can subscribe to the
github issue to receive updates.

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] pam_hbac for aix

2017-03-06 Thread Iulian Roman 
On Mon, Mar 6, 2017 at 12:20 PM, Jakub Hrozek  wrote:

> On Mon, Mar 06, 2017 at 10:59:12AM +0100, Iulian Roman wrote:
> > Hello,
> >
> > Does anyone know what is the status with the support for AIX in the
> > pam_hbac tool ? I've heard from a RH presentation that it is available,
> > although on the project site it does not seem to be supported yet.
> >
> > I would like to know if there are any plans in that direction ,  because
> > our migrations of thousands of AIX machines to IPA is conditioned by the
> > availability of pam_hbac.  The HBAC rules/policy design depends as well
> on
> > the method you use to parse the rules.
>
> It's in progress, but delayed due to the current work we are doing for
> RHEL-7.4. I've merged HP-UX support a couple of weeks ago and AIX
> support is next on the list.
>
> Any chance we can prioritize  that by creating  an RFE ?  We have quite a
big environment and it would simplify a lot the access control if we can
make use of pam_hbac.

> If you'd like to help with the port, any help is appreciated :-)
>
> I am willing to , at least with testing it on different OS versions. If
there is anything else i can do , please let me know.

> --
> Manage your subscription for the Freeipa-users mailing list:
> https://www.redhat.com/mailman/listinfo/freeipa-users
> Go to http://freeipa.org for more info on the project
>
-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] pam_hbac for aix

2017-03-06 Thread Jakub Hrozek 
On Mon, Mar 06, 2017 at 10:59:12AM +0100, Iulian Roman wrote:
> Hello,
> 
> Does anyone know what is the status with the support for AIX in the
> pam_hbac tool ? I've heard from a RH presentation that it is available,
> although on the project site it does not seem to be supported yet.
> 
> I would like to know if there are any plans in that direction ,  because
> our migrations of thousands of AIX machines to IPA is conditioned by the
> availability of pam_hbac.  The HBAC rules/policy design depends as well on
> the method you use to parse the rules.

It's in progress, but delayed due to the current work we are doing for
RHEL-7.4. I've merged HP-UX support a couple of weeks ago and AIX
support is next on the list.

If you'd like to help with the port, any help is appreciated :-)

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

[Freeipa-users] pam_hbac for aix

2017-03-06 Thread Iulian Roman 
Hello,

Does anyone know what is the status with the support for AIX in the
pam_hbac tool ? I've heard from a RH presentation that it is available,
although on the project site it does not seem to be supported yet.

I would like to know if there are any plans in that direction ,  because
our migrations of thousands of AIX machines to IPA is conditioned by the
availability of pam_hbac.  The HBAC rules/policy design depends as well on
the method you use to parse the rules.
-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project