IPA hbactest(ipa hbactest) fails for user even if appropriate HBAC rule is added in IPA.
Issue
- After creating new HBAC rule in IPA it is not getting listed in the rules and thus hbactest fails:
# ipa hbactest --user=ipauser01 --host=host101 --service=sshd | grep -v 'Not matched'
---------------------
Access granted: False
---------------------
- However,
ipa hbactest
executed against specific HBAC rule succeeds:
# ipa hbactest --user=ipauser01 --host=host101 --service=sshd --rules=hbac1001| grep -v 'Not matched'
--------------------
Access granted: True
--------------------
Matched rules: allow_all
Environment
- Red Hat Enterprise Linux 6/7
- IPA 3.x/4.x
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.