[pdm-devel] [PATCH datacenter-manager/proxmox/yew-comp v2 00/13] Add LDAP and AD realm support to Proxmox Datacenter Manager

[James Tremblay]

I am following this issue with interest. I am running an upgrade from 
alpha to beta and fully "patched"
I have looked at my PBS  \ PVE configuration for AD \ LDAP and i'm getting

Login failed. Please try again (api error (status = 401: Unauthorized))

is this expected?

On 9/22/25 11:05 AM, Shannon Sterz wrote:
> this patch series adds ldap and active directory (ad) support to proxmox
> datacenter manager. the series first moves some of the sync logic for
> ldap & ad realms out of proxmox backup manager into the proxmox-ldap
> crate.
>
> the next series of patches fixes up the existing proxmox-yew-comp
> components for adding and editing realms to function as intended for
> adding, editing, removing and syncing ad and ldap realms.
>
> finally, we add the necessary backend infrastructure and api endpoints
> to proxmox datacenter manager and expose the new ui components there.
>
> this series does not yet move proxmox backup server to use the new
> common crate. doing so would mean that proxmox backup server would also
> need to start using proxmox-access-control, which would be a lot more
> involved and is beste handled in a separate series in my opinion.
>
> Changelog
> ---------
>
> changes since v1, thanks @ Christoph Heiss:
>
> - added a patch to adjust the layout and placeholders for the edit/add
>    window of ldap and ad realms
> - made the sync dialog respect the configured sync settings for the
>    realm
> - made the user management component reload when being re-opened, so the
>    state isn't cached.
>
> things from Christoph's notes that i haven't touched:
>
> - did not add comment syncing as that isn't part of pbs either (if we
>    want to add that, imo we should do so after we factored out pbs' code
>    properly)
> - "Enable new users" did behave as inteded in my testing
> - no realm being ticket as default if default isn't set (this matches
>    pbs' behaviour but i'll tackle further default realm support in
>    general in a follo up series)
> - cli support will be tackled in a follow (depends on whether we want to
>    factor out more of the api parts or not)
>
> see also the discussion in the old thread [1].
>
> [1]:https://lore.proxmox.com/pdm-devel/DCZDLVQC9V6B.30GUQRQFGXCX6@proxmox.com/T/#u
>
> proxmox:
>
> Shannon Sterz (1):
>    ldap: add types and sync features
>
>   Cargo.toml                    |   2 +-
>   proxmox-ldap/Cargo.toml       |  22 ++
>   proxmox-ldap/debian/control   |  31 ++-
>   proxmox-ldap/debian/copyright |   2 +-
>   proxmox-ldap/src/lib.rs       |   6 +
>   proxmox-ldap/src/sync.rs      | 496 ++++++++++++++++++++++++++++++++++
>   proxmox-ldap/src/types.rs     | 317 ++++++++++++++++++++++
>   7 files changed, 873 insertions(+), 3 deletions(-)
>   create mode 100644 proxmox-ldap/src/sync.rs
>   create mode 100644 proxmox-ldap/src/types.rs
>
>
> proxmox-yew-comp:
>
> Shannon Sterz (6):
>    auth_view: add default column and allow setting ldap realms as default
>    utils: add pdm realm to `get_auth_domain_info`
>    auth_view/auth_edit_ldap: add support for active directory realms
>    auth_edit_ldap: add helpers to properly edit ad & ldap realms
>    auth_view: implement syncing ldap and ad realms
>    auth_edit_ldap: improve form layout and placeholders
>
>   src/auth_edit_ldap.rs   | 215 ++++++++++++++++++++++++++++++--------
>   src/auth_view.rs        | 223 +++++++++++++++++++++++++++++++++++++---
>   src/common_api_types.rs |   3 +
>   src/utils.rs            |  18 +---
>   4 files changed, 392 insertions(+), 67 deletions(-)
>
>
> proxmox-datacenter-manager:
>
> Shannon Sterz (6):
>    config: add domain config plugins for ldap and ad realms
>    server: add ldap and active directory authenticators
>    server: api: add api endpoints for configuring ldap & ad realms
>    api/auth: add endpoint to start ldap sync jobs
>    ui: add a panel to allow handling realms
>    ui: make the user tab reload when re-opened
>
>   Cargo.toml                           |   1 +
>   lib/pdm-api-types/src/acl.rs         |   3 +
>   lib/pdm-api-types/src/lib.rs         |   7 +
>   lib/pdm-config/Cargo.toml            |   1 +
>   lib/pdm-config/src/domains.rs        |  35 +++
>   server/Cargo.toml                    |   1 +
>   server/src/api/access/domains.rs     |  90 ++++++-
>   server/src/api/config/access/ad.rs   | 355 +++++++++++++++++++++++++
>   server/src/api/config/access/ldap.rs | 372 +++++++++++++++++++++++++++
>   server/src/api/config/access/mod.rs  |   8 +-
>   server/src/auth/ldap.rs              | 315 +++++++++++++++++++++++
>   server/src/auth/mod.rs               |  17 +-
>   ui/src/configuration/mod.rs          |  26 +-
>   13 files changed, 1221 insertions(+), 10 deletions(-)
>   create mode 100644 server/src/api/config/access/ad.rs
>   create mode 100644 server/src/api/config/access/ldap.rs
>   create mode 100644 server/src/auth/ldap.rs
>
>
> Summary over all repositories:
>    24 files changed, 2486 insertions(+), 80 deletions(-)
>
> --
> Generated by git-murpp 0.8.1
>
>
> _______________________________________________
> pdm-devel mailing list
> pdm-devel at lists.proxmox.com
> https://lists.proxmox.com/cgi-bin/mailman/listinfo/pdm-devel
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.proxmox.com/pipermail/pdm-devel/attachments/20250930/82685ebb/attachment.htm>