[Freeipa-users] pam_hbac for aix

[Jakub Hrozek]

On Mon, Mar 06, 2017 at 12:36:20PM +0100, Iulian Roman wrote:
> On Mon, Mar 6, 2017 at 12:20 PM, Jakub Hrozek <jhrozek at redhat.com> wrote:
> 
> > On Mon, Mar 06, 2017 at 10:59:12AM +0100, Iulian Roman wrote:
> > > Hello,
> > >
> > > Does anyone know what is the status with the support for AIX in the
> > > pam_hbac tool ? I've heard from a RH presentation that it is available,
> > > although on the project site it does not seem to be supported yet.
> > >
> > > I would like to know if there are any plans in that direction ,  because
> > > our migrations of thousands of AIX machines to IPA is conditioned by the
> > > availability of pam_hbac.  The HBAC rules/policy design depends as well
> > on
> > > the method you use to parse the rules.
> >
> > It's in progress, but delayed due to the current work we are doing for
> > RHEL-7.4. I've merged HP-UX support a couple of weeks ago and AIX
> > support is next on the list.
> >
> > Any chance we can prioritize  that by creating  an RFE ?  We have quite a
> big environment and it would simplify a lot the access control if we can
> make use of pam_hbac.

We already have:
    https://github.com/jhrozek/pam_hbac/issues/74

> 
> > If you'd like to help with the port, any help is appreciated :-)
> >
> > I am willing to , at least with testing it on different OS versions. If
> there is anything else i can do , please let me know.

Testing patches when there are would be nice. You can subscribe to the
github issue to receive updates.