[pdm-devel] [PATCH datacenter-manager/proxmox/yew-comp v2 00/13] Add LDAP and AD realm support to Proxmox Datacenter Manager

[Shannon Sterz]

On Tue Sep 30, 2025 at 5:12 PM CEST, James Tremblay wrote:
> I am following this issue with interest. I am running an upgrade from
> alpha to beta and fully "patched"
> I have looked at my PBS  \ PVE configuration for AD \ LDAP and i'm getting
>
> Login failed. Please try again (api error (status = 401: Unauthorized))
>
> is this expected?

this is probably better discussed on our bugzilla. there is an issue
there already for pdm's ldap/ad support [1]. could you provide some more
detail though?

- what does your configuration look like in
  `/etc/proxmox-datacenter-manager/access/domains.cfg`?
- is there something in the journal when you log in?
- is the user in `/etc/proxmox-datacenter-manager/access/user.cfg`
  enabled?

thanks in advance!

[1]: https://bugzilla.proxmox.com/show_bug.cgi?id=6793

> On 9/22/25 11:05 AM, Shannon Sterz wrote:
>> this patch series adds ldap and active directory (ad) support to proxmox
>> datacenter manager. the series first moves some of the sync logic for
>> ldap & ad realms out of proxmox backup manager into the proxmox-ldap
>> crate.
>>
>> the next series of patches fixes up the existing proxmox-yew-comp
>> components for adding and editing realms to function as intended for
>> adding, editing, removing and syncing ad and ldap realms.
>>
>> finally, we add the necessary backend infrastructure and api endpoints
>> to proxmox datacenter manager and expose the new ui components there.
>>
>> this series does not yet move proxmox backup server to use the new
>> common crate. doing so would mean that proxmox backup server would also
>> need to start using proxmox-access-control, which would be a lot more
>> involved and is beste handled in a separate series in my opinion.
>>
>> Changelog
>> ---------
>>
>> changes since v1, thanks @ Christoph Heiss:
>>
>> - added a patch to adjust the layout and placeholders for the edit/add
>>    window of ldap and ad realms
>> - made the sync dialog respect the configured sync settings for the
>>    realm
>> - made the user management component reload when being re-opened, so the
>>    state isn't cached.
>>
>> things from Christoph's notes that i haven't touched:
>>
>> - did not add comment syncing as that isn't part of pbs either (if we
>>    want to add that, imo we should do so after we factored out pbs' code
>>    properly)
>> - "Enable new users" did behave as inteded in my testing
>> - no realm being ticket as default if default isn't set (this matches
>>    pbs' behaviour but i'll tackle further default realm support in
>>    general in a follo up series)
>> - cli support will be tackled in a follow (depends on whether we want to
>>    factor out more of the api parts or not)
>>
>> see also the discussion in the old thread [1].
>>
>> [1]:https://lore.proxmox.com/pdm-devel/DCZDLVQC9V6B.30GUQRQFGXCX6@proxmox.com/T/#u
>>
>> proxmox:
>>
>> Shannon Sterz (1):
>>    ldap: add types and sync features
>>
>>   Cargo.toml                    |   2 +-
>>   proxmox-ldap/Cargo.toml       |  22 ++
>>   proxmox-ldap/debian/control   |  31 ++-
>>   proxmox-ldap/debian/copyright |   2 +-
>>   proxmox-ldap/src/lib.rs       |   6 +
>>   proxmox-ldap/src/sync.rs      | 496 ++++++++++++++++++++++++++++++++++
>>   proxmox-ldap/src/types.rs     | 317 ++++++++++++++++++++++
>>   7 files changed, 873 insertions(+), 3 deletions(-)
>>   create mode 100644 proxmox-ldap/src/sync.rs
>>   create mode 100644 proxmox-ldap/src/types.rs
>>
>>
>> proxmox-yew-comp:
>>
>> Shannon Sterz (6):
>>    auth_view: add default column and allow setting ldap realms as default
>>    utils: add pdm realm to `get_auth_domain_info`
>>    auth_view/auth_edit_ldap: add support for active directory realms
>>    auth_edit_ldap: add helpers to properly edit ad & ldap realms
>>    auth_view: implement syncing ldap and ad realms
>>    auth_edit_ldap: improve form layout and placeholders
>>
>>   src/auth_edit_ldap.rs   | 215 ++++++++++++++++++++++++++++++--------
>>   src/auth_view.rs        | 223 +++++++++++++++++++++++++++++++++++++---
>>   src/common_api_types.rs |   3 +
>>   src/utils.rs            |  18 +---
>>   4 files changed, 392 insertions(+), 67 deletions(-)
>>
>>
>> proxmox-datacenter-manager:
>>
>> Shannon Sterz (6):
>>    config: add domain config plugins for ldap and ad realms
>>    server: add ldap and active directory authenticators
>>    server: api: add api endpoints for configuring ldap & ad realms
>>    api/auth: add endpoint to start ldap sync jobs
>>    ui: add a panel to allow handling realms
>>    ui: make the user tab reload when re-opened
>>
>>   Cargo.toml                           |   1 +
>>   lib/pdm-api-types/src/acl.rs         |   3 +
>>   lib/pdm-api-types/src/lib.rs         |   7 +
>>   lib/pdm-config/Cargo.toml            |   1 +
>>   lib/pdm-config/src/domains.rs        |  35 +++
>>   server/Cargo.toml                    |   1 +
>>   server/src/api/access/domains.rs     |  90 ++++++-
>>   server/src/api/config/access/ad.rs   | 355 +++++++++++++++++++++++++
>>   server/src/api/config/access/ldap.rs | 372 +++++++++++++++++++++++++++
>>   server/src/api/config/access/mod.rs  |   8 +-
>>   server/src/auth/ldap.rs              | 315 +++++++++++++++++++++++
>>   server/src/auth/mod.rs               |  17 +-
>>   ui/src/configuration/mod.rs          |  26 +-
>>   13 files changed, 1221 insertions(+), 10 deletions(-)
>>   create mode 100644 server/src/api/config/access/ad.rs
>>   create mode 100644 server/src/api/config/access/ldap.rs
>>   create mode 100644 server/src/auth/ldap.rs
>>
>>
>> Summary over all repositories:
>>    24 files changed, 2486 insertions(+), 80 deletions(-)
>>
>> --
>> Generated by git-murpp 0.8.1
>>
>>
>> _______________________________________________
>> pdm-devel mailing list
>> pdm-devel at lists.proxmox.com
>> https://lists.proxmox.com/cgi-bin/mailman/listinfo/pdm-devel
>>
>>