Red Hat Bugzilla – Bug 1312353
[RFE] HBAC for Non-SSSD Linux and Unix Systems
Last modified: 2016-02-29 06:29:55 EST
Description of problem:
Most organizations have a heterogeneous environment with Linux and Unix systems. For Linux, mostly RHEL, IPA is a nice solution for IdM. However, HBAC must also be possible for other Linux and Unix systems.
sssd-ldap in newer versions is using the host attribute, like pam_ldap does. A better solution is probably a portable version of pam_hbac. See https://github.com/jhrozek/pam_hbac
Version-Release number of selected component (if applicable):
IPA 4.2, RHEL 7.2
Steps to Reproduce:
Please note that there's nothing much to do on the server side, all the infra is already there. What we need to do is to finish the pam_hbac module and provide it in some way to our customers.
Correct. This is something we cannot even track here in Red Hat Bugzilla as it is the other platforms that needs to adopt the pam_hbac module.