[Freeipa-users] Sanity check on hbac rule on "foreign" domains.

[KodaK]

On Mon, Aug 5, 2013 at 4:23 AM, Sumit Bose <sbose at redhat.com> wrote:
> Which version of FreeIPA are you using on the server? Maybe the sssd
> logs at a high debug level will give more details why the access is
> denied you you try to log in with ssh as testuser on
> stlmoracsbx01.domain.com.

Something must have been cached, somewhere.
(Even though I cleared every cache I could think of.)

I haven't had time until now; I just tried again and allowed users
work and disallowed users don't.

I have no idea.

Thanks,

--Jason