So I updated my pam module that allows #IBM #AIX to integrate with #FreeIPA to a much improved release.
If there are any people who care, could they help me fix https://www.freeipa.org/page/ConfiguringAixClients by adding information on how to actually have HBAC instead of the very poor man's example in that page?
Check it out here: https://github.com/rseabra/pam_ipahbac/releases/tag/v0.1.0