[Freeipa-users] IPA HBAC access using SSSD for user in trusted AD domain (RHEL 6.8)

[Lukas Slebodnik]

On (14/07/16 21:23), Sullivan, Daniel [AAA] wrote:
>Justin,
>
>Thank you for taking the time to reply to me; I really appreciate your willingness to help.
>
>Upgrading to sssd1.14 (from the copr repo) on the client seems to have fixed this problem across the board.  I don’t have a system that is currently broken to capture this data, but if it is important for you to have the log data to try and resolve this bug I could try to obtain it for you by purposely try to induce the issue by upgrading another system and hoping the bug presents itself, and then capture the data.  Please advise if you would like me to attempt this.
>
>I was really frustrated by this bug and am happy that I can consider this issue resolved.  Please let me know if you would like me to try and capture the data as you described.
>
I am glad that 1.14 works for you :-)
But there might be other bugs. I know about few regressions.

BTW about the HBAC issue, did you use the default_domain_suffix previously?

LS