[Freeipa-users] Re: HBAC rule for http service

2018-08-29 Thread Alexander Bokovoy via FreeIPA-users
On ke, 29 elo 2018, Jan Gardian via FreeIPA-users wrote: Hello Alexander, Thanks for help. I found that I have to name pam.d service with same name as HBAC service in IPA and it works. My mistake when reading documentation. Glad that you got it working. Yes, HBAC service name is the PAM

[Freeipa-users] Re: HBAC rule for http service

2018-08-29 Thread Jan Gardian via FreeIPA-users
Hello Alexander, Thanks for help. I found that I have to name pam.d service with same name as HBAC service in IPA and it works. My mistake when reading documentation. With kind regards, Jan Gardian On 08/28/2018 05:44 PM, Alexander Bokovoy wrote: On ti, 28 elo 2018, Jan Gardian via

[Freeipa-users] Re: HBAC rule for http service

2018-08-28 Thread Alexander Bokovoy via FreeIPA-users
On ti, 28 elo 2018, Jan Gardian via FreeIPA-users wrote: Hello, Could you please be so kind provide me advice how to setup HBAC rule to allow user authentication/authorization to web service but not to server where this web run. Our ipa runs at Centos 7.5.1804, version of IPA 4.5.4,