Charles Hedrick wrote:
In my opinion the whole rfc3704bis implementation of net groups is
wonky.
Since you seem to be using FreeIPA wouldn't it be a better solution to
implement a script for converting your netgroups into HBAC rules?
I never did this myself though.
Ciao, Michael.