[Freeipa-users] Active Directory users are not controlled by HBAC

[Birnbaum, Warren (ETW)]

Hi.

I have a been successful using Freeipa 4.1 configuring active directory users and with sudo.  The problem I am having is that the HBAC rules are not applying to my active directory users.  They have access to all systems even if I disable my Allow_ALL rule.  Is there something special I should be doing to domain?

Thanks,

Warren

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20160122/4db240ce/attachment.htm>