From b60912e888142fbc8839e5ac18b507d288b98793 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Aur=C3=A9lien=20Bompard?= <aurelien@bompard.org>
Date: Mon, 18 Jan 2021 15:52:00 +0100
Subject: [PATCH] The IPA HBAC rule for sysadmin-main should apply on all hosts
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
---
 roles/ipa/client/tasks/hbac.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/roles/ipa/client/tasks/hbac.yml b/roles/ipa/client/tasks/hbac.yml
index e3f1b4b842..e58b456923 100644
--- a/roles/ipa/client/tasks/hbac.yml
+++ b/roles/ipa/client/tasks/hbac.yml
@@ -38,6 +38,7 @@
   ipahbacrule:
     name: "group/sysadmin-main"
     description: "Give members of group sysadmin-main shell access anywhere"
+    hostcategory: "all"
     ipaadmin_password: "{{ ipa_admin_password }}"
     state: present
     group: