All,

Occasionally some of our app teams work with external auditors that wish to verify proper login access to servers.

In our older commercial AD integration tool, they'd just run an "access report" which would provide all desired information.  I got hit up today to run an access report for sssd-enabled prod servers.

I saw with great interest the "sssctl access-report" command.  


# sssctl access-report amer.company.com

Access report not implemented for domains of type ad


Any plans to implement this access-report subcommand for domains of type AD? 

 No urgency; you  can get most of what's needed via 
realm list 
and 
sssctl user-checks <user>

Spike