We should support permit/deny of groups in realmd. Currently 'realm permit xxxx' is about users only. Obviously the permit/deny stuff in realmd is supplementary local policy to HBAC policy defined in the directory. But it would be good to have permit/deny of groups supported in realmd, as it helps admins solve various problems simply.
Created attachment 78779 [details] [review] Add support for permitting logins by group
Attachment 78779 [details] pushed as afe6fd2 - Add support for permitting logins by group
Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.