[Freeipa-users] pam_hbac for aix

[Iulian Roman]

Hello,

Does anyone know what is the status with the support for AIX in the
pam_hbac tool ? I've heard from a RH presentation that it is available,
although on the project site it does not seem to be supported yet.

I would like to know if there are any plans in that direction , because
our migrations of thousands of AIX machines to IPA is conditioned by the
availability of pam_hbac. The HBAC rules/policy design depends as well on
the method you use to parse the rules.

[Jakub Hrozek]

Post by Iulian Roman
Hello,
Does anyone know what is the status with the support for AIX in the
pam_hbac tool ? I've heard from a RH presentation that it is available,
although on the project site it does not seem to be supported yet.
I would like to know if there are any plans in that direction , because
our migrations of thousands of AIX machines to IPA is conditioned by the
availability of pam_hbac. The HBAC rules/policy design depends as well on
the method you use to parse the rules.

It's in progress, but delayed due to the current work we are doing for
RHEL-7.4. I've merged HP-UX support a couple of weeks ago and AIX
support is next on the list.

If you'd like to help with the port, any help is appreciated :-)

[Iulian Roman]

This post might be inappropriate. Click to display it.

[Jakub Hrozek]

Post by Iulian Roman

Post by Jakub Hrozek

Post by Iulian Roman
Hello,
Does anyone know what is the status with the support for AIX in the
pam_hbac tool ? I've heard from a RH presentation that it is available,
although on the project site it does not seem to be supported yet.
I would like to know if there are any plans in that direction , because
our migrations of thousands of AIX machines to IPA is conditioned by the
availability of pam_hbac. The HBAC rules/policy design depends as well

on

Post by Iulian Roman
the method you use to parse the rules.

It's in progress, but delayed due to the current work we are doing for
RHEL-7.4. I've merged HP-UX support a couple of weeks ago and AIX
support is next on the list.
Any chance we can prioritize that by creating an RFE ? We have quite a

big environment and it would simplify a lot the access control if we can
make use of pam_hbac.

We already have:
https://github.com/jhrozek/pam_hbac/issues/74

Post by Iulian Roman

Post by Jakub Hrozek
If you'd like to help with the port, any help is appreciated :-)
I am willing to , at least with testing it on different OS versions. If

there is anything else i can do , please let me know.

Testing patches when there are would be nice. You can subscribe to the
github issue to receive updates.