On ke, 29 elo 2018, Jan Gardian via FreeIPA-users wrote:
Hello Alexander,
Thanks for help.
I found that I have to name pam.d service with same name as HBAC
service in IPA and it works.
My mistake when reading documentation.
Glad that you got it working.
Yes, HBAC service name is the PAM service name in the context of a
system authorization when pam_sss.so does the check.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland