On (14/09/16 08:37), Jose Alvarez R. wrote: >Hi Jakub > >Thanks for your response. It's an option, but my backups servers I will not >add to the FreeIPA server. > >Then, I cannot use the option HBAC, because I want my backup server can >connect with root to some client server of my FreeIPA Server. > root is not handled by sssd/freeIPA. It is a local user; and thus access cannot be denied by HBAC.
LS -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project