[Freeipa-users] Re: Setting up HBAC for external users