<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>I am following this issue with interest. I am running an upgrade
from alpha to beta and fully "patched" <br>
I have looked at my PBS \ PVE configuration for AD \ LDAP and i'm
getting<br>
<br class="Apple-interchange-newline">
<span
style="color: rgb(226, 226, 226); font-family: "Roboto Flex"; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(69, 71, 71); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial; display: inline !important; float: none;">Login
failed. Please try again (api error (status = 401:
Unauthorized))<br>
<br>
is this expected? <br>
</span></p>
<div class="moz-cite-prefix">On 9/22/25 11:05 AM, Shannon Sterz
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:20250922150519.399573-1-s.sterz@proxmox.com">
<pre wrap="" class="moz-quote-pre">this patch series adds ldap and active directory (ad) support to proxmox
datacenter manager. the series first moves some of the sync logic for
ldap & ad realms out of proxmox backup manager into the proxmox-ldap
crate.
the next series of patches fixes up the existing proxmox-yew-comp
components for adding and editing realms to function as intended for
adding, editing, removing and syncing ad and ldap realms.
finally, we add the necessary backend infrastructure and api endpoints
to proxmox datacenter manager and expose the new ui components there.
this series does not yet move proxmox backup server to use the new
common crate. doing so would mean that proxmox backup server would also
need to start using proxmox-access-control, which would be a lot more
involved and is beste handled in a separate series in my opinion.
Changelog
---------
changes since v1, thanks @ Christoph Heiss:
- added a patch to adjust the layout and placeholders for the edit/add
window of ldap and ad realms
- made the sync dialog respect the configured sync settings for the
realm
- made the user management component reload when being re-opened, so the
state isn't cached.
things from Christoph's notes that i haven't touched:
- did not add comment syncing as that isn't part of pbs either (if we
want to add that, imo we should do so after we factored out pbs' code
properly)
- "Enable new users" did behave as inteded in my testing
- no realm being ticket as default if default isn't set (this matches
pbs' behaviour but i'll tackle further default realm support in
general in a follo up series)
- cli support will be tackled in a follow (depends on whether we want to
factor out more of the api parts or not)
see also the discussion in the old thread [1].
[1]: <a class="moz-txt-link-freetext" href="https://lore.proxmox.com/pdm-devel/DCZDLVQC9V6B.30GUQRQFGXCX6@proxmox.com/T/#u">https://lore.proxmox.com/pdm-devel/DCZDLVQC9V6B.30GUQRQFGXCX6@proxmox.com/T/#u</a>
proxmox:
Shannon Sterz (1):
ldap: add types and sync features
Cargo.toml | 2 +-
proxmox-ldap/Cargo.toml | 22 ++
proxmox-ldap/debian/control | 31 ++-
proxmox-ldap/debian/copyright | 2 +-
proxmox-ldap/src/lib.rs | 6 +
proxmox-ldap/src/sync.rs | 496 ++++++++++++++++++++++++++++++++++
proxmox-ldap/src/types.rs | 317 ++++++++++++++++++++++
7 files changed, 873 insertions(+), 3 deletions(-)
create mode 100644 proxmox-ldap/src/sync.rs
create mode 100644 proxmox-ldap/src/types.rs
proxmox-yew-comp:
Shannon Sterz (6):
auth_view: add default column and allow setting ldap realms as default
utils: add pdm realm to `get_auth_domain_info`
auth_view/auth_edit_ldap: add support for active directory realms
auth_edit_ldap: add helpers to properly edit ad & ldap realms
auth_view: implement syncing ldap and ad realms
auth_edit_ldap: improve form layout and placeholders
src/auth_edit_ldap.rs | 215 ++++++++++++++++++++++++++++++--------
src/auth_view.rs | 223 +++++++++++++++++++++++++++++++++++++---
src/common_api_types.rs | 3 +
src/utils.rs | 18 +---
4 files changed, 392 insertions(+), 67 deletions(-)
proxmox-datacenter-manager:
Shannon Sterz (6):
config: add domain config plugins for ldap and ad realms
server: add ldap and active directory authenticators
server: api: add api endpoints for configuring ldap & ad realms
api/auth: add endpoint to start ldap sync jobs
ui: add a panel to allow handling realms
ui: make the user tab reload when re-opened
Cargo.toml | 1 +
lib/pdm-api-types/src/acl.rs | 3 +
lib/pdm-api-types/src/lib.rs | 7 +
lib/pdm-config/Cargo.toml | 1 +
lib/pdm-config/src/domains.rs | 35 +++
server/Cargo.toml | 1 +
server/src/api/access/domains.rs | 90 ++++++-
server/src/api/config/access/ad.rs | 355 +++++++++++++++++++++++++
server/src/api/config/access/ldap.rs | 372 +++++++++++++++++++++++++++
server/src/api/config/access/mod.rs | 8 +-
server/src/auth/ldap.rs | 315 +++++++++++++++++++++++
server/src/auth/mod.rs | 17 +-
ui/src/configuration/mod.rs | 26 +-
13 files changed, 1221 insertions(+), 10 deletions(-)
create mode 100644 server/src/api/config/access/ad.rs
create mode 100644 server/src/api/config/access/ldap.rs
create mode 100644 server/src/auth/ldap.rs
Summary over all repositories:
24 files changed, 2486 insertions(+), 80 deletions(-)
--
Generated by git-murpp 0.8.1
_______________________________________________
pdm-devel mailing list
<a class="moz-txt-link-abbreviated" href="mailto:pdm-devel@lists.proxmox.com">pdm-devel@lists.proxmox.com</a>
<a class="moz-txt-link-freetext" href="https://lists.proxmox.com/cgi-bin/mailman/listinfo/pdm-devel">https://lists.proxmox.com/cgi-bin/mailman/listinfo/pdm-devel</a>
</pre>
</blockquote>
</body>
</html>