On 27.01.21 10:11, Alexander Bokovoy via FreeIPA-users wrote:
The FreeIPA team would like to announce FreeIPA 4.9.1 release!
It can be downloaded from
http://www.freeipa.org/page/Downloads. Builds
for Fedora distributions will be available from the official repository
soon.
== Highlights in 4.9.1
* 3226: [RFE] ipa sudorule-add-user should accept more types of
characters
IPA now supports users and groups from trusted Active Directory
domains in SUDO rules to specify runAsUser/runAsGroup properties
without an intermediate non-POSIX group membership
This means the right way to map an AD group would now be creating a
POSIX group that has the AD group as its direct member?
Is an intermediate non-POSIX group still needed for HBAC?
Cheers,
Ronald