Red Hat Bugzilla – Bug 1169459
sssd-ad: The man page description to enable GPO HBAC Policies are unclear
Last modified: 2015-03-10 02:10:00 EDT
Description of problem: The part of the GPO to enable this feature is unclear. The man page calls it; RemoteInteractiveLogonRight DenyRemoteInteractiveLogonRight When using the GPO editor, the previous option is named; Allow log on through Remote Desktop Services Deny log on through Remote Desktop Services which can be easily confused over Allow log on locally Deny log on locally Edit the SSSD-AD man page to clarify this. Version-Release number of selected component (if applicable): All How reproducible: N/A Steps to Reproduce: 1. 2. 3. Actual results: N/A Expected results: N/A Additional info:
Upstream ticket: https://fedorahosted.org/sssd/ticket/2515
Dan, if you'd like the patch to land in 7.1, then we need the patch on the devel list sooner rather than later, the exception phase is getting close..
VERIFIED.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2015-0441.html