I have one more question. Is there any knowledge about PAM
configuration of Debian/Ubuntu
for this?
On a Debian (& Ubuntu, etc) system, the contents of /etc/pam.d/sudo will look a little
different but the concepts are the same.
Installing libpam-sss (which would be pulled in by freeipa-client) should set up
/etc/pam.d/common-{auth,account} to check against sssd. And these files are included by
/etc/pam.d/sudo.
So from the administrator's point of view, just create HBAC rules and sudo rules and
it should all work the same way.
--
Sam Morris <
https://robots.org.uk/>
PGP: rsa4096/CAAA AA1A CA69 A83A 892B 1855 D20B 4202 5CDA 27B9