mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2026-10-26 07:00:07 -05:00
- Tests to cover both root domain and subdomain users: - Test that adding AD users/groups without the external group to HBAC rules fails. - Test HBAC rule denies SSH access for AD users. - Test HBAC rule allows SSH access for AD users in external group. - Test HBAC rule denies sudo access for AD users when rule doesn't include them. - Test HBAC rule allows sudo access for AD users in external group. Related : https://pagure.io/freeipa/issue/9845 Signed-off-by: Anuja More <amore@redhat.com> Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>