[Freeipa-users] Active Directory users are not controlled by HBAC

[Alexander Bokovoy]

On Mon, 25 Jan 2016, Birnbaum, Warren (ETW) wrote:
>Thanks Alexander.  Is there a place where there are example pam stacks
>that work with active directory and hbac?
Defaults in RHEL/Fedora should be enough:
 - install RHEL/Fedora,
 - apply ipa-client-install,

then you get proper setup. That's what is tested and supported.

ipa-client-install would run authconfig utility with correct parameters
to set PAM stack properly.

-- 
/ Alexander Bokovoy