I am considering the Host Based Access Control features to help manage things in our infrastructure that cannot be ipa-clients - like network hardware (switches, routers)

With the understanding that my servers do not run the DNS, can I create such hosts to use in host groups and HBAC rules ?

______________________________________________________________________________________________