Is it possible to disable or override hbac rules?

[Orion Poplawski]

I'm dealing with a buggy sssd 1.13.4 on ubuntu 16.04 breaking HBAC rule
processing for AD users.  Is there someway I can disable this or override it
for a specific user on the machine itself?

Thanks.

-- 
Orion Poplawski
Manager of NWRA Technical Systems          720-772-5637
NWRA, Boulder/CoRA Office             FAX: [phone]
3380 Mitchell Lane                       orion(a)nwra.com
Boulder, CO 80301                 https://www.nwra.com/

[Sumit Bose]

On Tue, Mar 13, 2018 at 09:45:47AM -0600, Orion Poplawski wrote:
>  I'm dealing with a buggy sssd 1.13.4 on ubuntu 16.04 breaking
> HBAC rule
>  processing for AD users.  Is there someway I can disable this or override it
>  for a specific user on the machine itself? 
Hi,

you can use a different access_provider on the client, in the worst case
'access_provider=permit'.

HTH

bye,
Sumit

> 
> Thanks.
> 
> -- 
> Orion Poplawski
> Manager of NWRA Technical Systems          720-772-5637
> NWRA, Boulder/CoRA Office             FAX: [phone]
> 3380 Mitchell Lane                       orion(a)nwra.com
> Boulder, CO 80301                 https://www.nwra.com/
> _______________________________________________
> sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
> To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org

[Orion Poplawski]

On 03/13/2018 10:50 AM, Sumit Bose wrote:
>  On Tue, Mar 13, 2018 at 09:45:47AM -0600, Orion Poplawski wrote:
> > I'm dealing with a buggy sssd 1.13.4 on ubuntu 16.04 breaking HBAC rule
> > processing for AD users.  Is there someway I can disable this or override it
> > for a specific user on the machine itself?
>  
>  Hi,
>  
>  you can use a different access_provider on the client, in the worst case
>  'access_provider=permit'.
>  
>  HTH
>  
>  bye,
>  Sumit 
Thanks!  Lukas suggested access_provider=simple and that appears to have
worked like a charm once I realized I had to remove the existing
access_provider=ipa.

-- 
Orion Poplawski
Manager of NWRA Technical Systems          720-772-5637
NWRA, Boulder/CoRA Office             FAX: [phone]
3380 Mitchell Lane                       orion(a)nwra.com
Boulder, CO 80301                 https://www.nwra.com/