Examples 3 and 4 in HBACTEST AND TRUSTED DOMAINS section of ipa help hbactest are identical:
HBACTEST AND TRUSTED DOMAINS
ipa help hbactest
ipa help hbactest <snip> 3. Test if a user from a trusted domain specified by its SID matches any rule: $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \ --host `hostname` --service sshd -------------------- Access granted: True -------------------- Matched rules: allow_all Matched rules: can_login 4. Test if other user from a trusted domain specified by its SID matches any rule: $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \ --host `hostname` --service sshd -------------------- Access granted: True -------------------- Matched rules: allow_all Matched rules: can_login
One of them should be either removed or modified.
master: 7877491[[BR]] ipa-3-2: 328059e
Metadata Update from @akrivoka: - Issue assigned to tbabej - Issue set to the milestone: FreeIPA 3.2.x - 2013/05 (bug fixing)
Login to comment on this ticket.