Allow HBAC provider to be used with non-IPA LDAP servers

[sssd-bot]

Cloned from Pagure issue: https://pagure.io/SSSD/sssd/issue/671

• Created at 2010-11-07 13:31:14 by sgallagh
• Closed as Fixed
• Assigned to nobody

---

Several individuals have expressed interest in the past about the idea of using HBAC without IPA. For one reason or another, their environment is not readily able to migrate to IPA, but they would be able to implement the HBAC schema and provide that to the clients.

Currently, SSSD's HBAC implementation requires that {{{id_provider = ipa}}} in order to set it up correctly. We should look into making it possible to run the HBAC provider independent of IPA>

Comments

---

Comment from dpal at 2010-11-09 15:24:07

Fields changed

milestone: NEEDS_TRIAGE => SSSD Deferred

---

Comment from dpal at 2012-01-19 03:19:54

Fields changed

rhbz: => 0

---

Comment from jhrozek at 2016-11-17 11:17:36

https://github.com/jhrozek/pam_hbac

blockedby: =>
blocking: =>
changelog: =>
coverity: =>
design: =>
design_review: => 0
feature_milestone: =>
fedora_test_page: =>
mark: => 0
patch: => 0
resolution: => fixed
review: => 0
selected: =>
sensitive: => 0
status: new => closed

---

Comment from sgallagh at 2017-02-24 14:29:23

Metadata Update from @sgallagh:

• Issue set to the milestone: SSSD Patches welcome