[Freeipa-users] Restrict access to certain hosts

[Rob Crittenden]

Ashay Humane wrote:
> Hi List,
> 
> Does FreeIPA have a feature to restrict users to certain hosts/hostgroups?
> If so, can this policy be fine grained?
> 
> For example, if hostgroup1 contains host1, host2, host3, can we say:
> "Allow user1 to access all hosts in hostgroup1, except host2".
> 
> Thanks,
> Ashay

It is limited to a client-side control currently and is documented at 
http://freeipa.org/page/AdministratorsGuide#Configuring_Host-Based_Access_Control

rob