Hi all,

I am in the beginning stages of researching moving from NIS to FreeIPA. I am running through the workshop on the FreeIPA github, and am having difficulty understanding the difference between categories and groups.

For example, I have one HBAC rule that came pre-defined on my FreeIPA server for "allow_systemd-user" that says it applies for user category and host category of "all". But then the workshop has me add an HBAC rule to allow a user to access a specific host by adding user and host groups, not categories.

I'm sure there is a simple difference between the two, but I am not having much luck finding these concepts explained anywhere in the documentation. Can you point me towards where I can find this?

Thank you!