[Freeipa-users] HBAC and AD users

[Jakub Hrozek]

On Tue, Jul 19, 2016 at 11:26:02AM +1000, Lachlan Musicman wrote:
> I think the thing that frustrates the most is that id user at domain.com is
> returning correct data on both but they can't login....and I can't even
> show that this is the case because now they can login. Difficult to
> reproduce :/

Debugging from HBAC should at least tell you why the rules didn't
match...