From mboxrd@z Thu Jan 1 00:00:00 1970
Return-Path: <gaio@sv.lnf.it>
Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (2048 bits))
(No client certificate requested)
by lists.proxmox.com (Postfix) with ESMTPS id 6562B69120
for <pve-user@lists.proxmox.com>; Thu, 11 Feb 2021 13:32:24 +0100 (CET)
Received: from firstgate.proxmox.com (localhost [127.0.0.1])
by firstgate.proxmox.com (Proxmox) with ESMTP id 5B5341BDD3
for <pve-user@lists.proxmox.com>; Thu, 11 Feb 2021 13:32:24 +0100 (CET)
Received: from smtp8.ngi.it (smtp8.ngi.it [IPv6:2001:4c91::24])
by firstgate.proxmox.com (Proxmox) with ESMTP id 8F7701BDC9
for <pve-user@lists.proxmox.com>; Thu, 11 Feb 2021 13:32:23 +0100 (CET)
Received: from tank.sv.lnf.it (88-147-114-200.static.eolo.it [88.147.114.200])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256
bits)) (No client certificate requested)
by smtp8.ngi.it (Postfix) with ESMTPS id 0EFAB611BF
for <pve-user@lists.proxmox.com>; Thu, 11 Feb 2021 13:32:10 +0100 (CET)
Authentication-Results: smtp8.ngi.it; dkim=pass (1024-bit key;
unprotected) header.d=sv.lnf.it header.i=@sv.lnf.it header.b="I6Qf4lp8";
dkim-atps=neutral
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sv.lnf.it;
s=2017;
h=In-Reply-To:Content-Transfer-Encoding:Content-Type:MIME-Version:
References:Message-ID:Subject:To:From:Date:Sender:Reply-To:Cc:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
List-Post:List-Owner:List-Archive;
bh=/geLg3VncHAomDIvRtQlLC+IrfDDwUFJcHR9p0OPPRk=; b=I6Qf4lp8ilnrRT7Bxb5TpuLcr6
1/dlZSuLMkVH9wwURy5+YDpwvopFNIT2DfeLAvLYUT2vsjbQz1+4olgXrcd0YSBAV3h3DJmEm6J9l
j11UAO5qyZAqH8RLGRmUj5oRWL2WbuGL+1v9EFxavSOszw/hy+HnexO4zymJsyRn5Bp0=;
Received: from [10.5.1.3] (helo=vdmsv1.ad.fvg.lnf.it)
by tank.sv.lnf.it with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
(Exim 4.89) (envelope-from <gaio@sv.lnf.it>) id 1lAB8k-000FKh-9K
for pve-user@lists.proxmox.com; Thu, 11 Feb 2021 13:32:10 +0100
Received: from [10.5.1.44] (helo=hermione.sv.lnf.it)
by vdmsv1.ad.fvg.lnf.it with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
(Exim 4.89) (envelope-from <gaio@sv.lnf.it>) id 1lAB8j-0003m1-PE
for pve-user@lists.proxmox.com; Thu, 11 Feb 2021 13:32:09 +0100
Received: by hermione.sv.lnf.it (Postfix, from userid 1000)
id 9ABB8A000B5; Thu, 11 Feb 2021 13:32:09 +0100 (CET)
Date: Thu, 11 Feb 2021 13:32:09 +0100
From: Marco Gaiarin <gaio@sv.lnf.it>
To: pve-user@lists.proxmox.com
Message-ID: <20210211123209.GR3003@sv.lnf.it>
References: <YCUErLTBBRaK9gKo@inett.de>
<e05701fa-4141-61a2-3845-0a7bf0a7c0bb@proxmox.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <e05701fa-4141-61a2-3845-0a7bf0a7c0bb@proxmox.com>
'Organization: Associazione La Nostra Famiglia - Polo FVG'
'From: Marco Gaiarin <marco.gaiarin@lanostrafamiglia.it>'
X-SPAM-LEVEL: Spam detection results: 0
AWL 0.161 Adjusted score from AWL reputation of From: address
DKIM_SIGNED 0.1 Message has a DKIM or DK signature,
not necessarily valid
DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature
DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's
domain JMQ_SPF_NEUTRAL 0.5 SPF set to ?all
SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record
T_SPF_PERMERROR 0.01 SPF: test of record failed (permerror)
Subject: Re: [PVE-User] Shell without realm 'pam'
X-BeenThere: pve-user@lists.proxmox.com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Proxmox VE user list <pve-user.lists.proxmox.com>
List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pve-user>,
<mailto:pve-user-request@lists.proxmox.com?subject=unsubscribe>
List-Archive: <http://lists.proxmox.com/pipermail/pve-user/>
List-Post: <mailto:pve-user@lists.proxmox.com>
List-Help: <mailto:pve-user-request@lists.proxmox.com?subject=help>
List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-user>,
<mailto:pve-user-request@lists.proxmox.com?subject=subscribe>
X-List-Received-Date: Thu, 11 Feb 2021 12:32:24 -0000
Mandi! Thomas Lamprecht
In chel di` si favelave...
> Is the LDAP also exposed in the system and valid for login or do they
> have credentials of an existing PAM user?
Effectively this lead me to a side-question.
If LDAP/AD users are also exposed to system (PAM/NSS) via
lib(pam|nss)-ldap(d) and/or winbind, what is the difference?
Could be that a simple flag can be raised 'also available to PAM
stack'?
--
dott. Marco Gaiarin GNUPG Key ID: 240A3D66
Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/
Polo FVG - Via della Bontà , 7 - 33078 - San Vito al Tagliamento (PN)
marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797
Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)