On to, 01 joulu 2016, Denis Müller wrote:
Hello Alexander,
thank you for reply. As i understand, working with ad users/groups works this
way:
ad_users => ad_users_external_group => ipa_users_group
So i can manage ipa_users_group to provide Sudo Rules etc.
But how can i provide rules to a single user? What would be the best way?
The same way -- by specifying user as part of the external group.
Check out this email, this topic is raised regularly:
https://www.redhat.com/archives/freeipa-users/2016-October/msg00083.html
--
/ Alexander Bokovoy
--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project