46.4. Adding HBAC service groups

Procedure

1. Select Policy>Host-Based Access Control>HBAC Service Groups.
2. Click Add to add an HBAC service group.
3. Enter a name for the service group, and click Edit.
4. On the service group configuration page, click Add to add an HBAC service as a member of the group.

Procedure

1. Use the ipa hbacsvcgroup-add command in your terminal to add an HBAC service group. For example, to add a group named login:

   $ ipa hbacsvcgroup-add
   Service group name: login
   --------------------------------
   Added HBAC service group "login"
   --------------------------------
     Service group name: login

2. Use the ipa hbacsvcgroup-add-member command to add an HBAC service as a member of the group. For example, to add the sshd service to the login group:

   $ ipa hbacsvcgroup-add-member
   Service group name: login
   [member HBAC service]: sshd
     Service group name: login
     Member HBAC service: sshd
   -------------------------
   Number of members added 1
   -------------------------