From: Wolfgang Bumiller <w.bumiller@proxmox.com>
To: Christian Ebner <c.ebner@proxmox.com>
Cc: pdm-devel@lists.proxmox.com
Subject: Re: [pdm-devel] [PATCH datacenter-manager/proxmox v2 0/6] pbs client: fix PBS version 3 login ticket parsing compatibility
Date: Tue, 30 Sep 2025 13:49:21 +0200 [thread overview]
Message-ID: <5jmcsjt7cdnnxghl3hxxfdph2m5euzydxrnpltt2vorp6o7b6s@6fu6j2jlsrqz> (raw)
In-Reply-To: <20250930080207.111162-1-c.ebner@proxmox.com>
On Tue, Sep 30, 2025 at 10:02:01AM +0200, Christian Ebner wrote:
> This patches fix the ticket parsing when login to instances of PBS version 3
> or lower. For this, the current pve_compat flags for `Login` and `Client`
> are refactored to be an extendable enum variant instead, adding the ticket
> parsing backwards compatibility. In that compatibility mode, response parsing
> of the ticket does not interpret the presence of the `ticket-info` field as the
> ticket being a `http-only` ticket and fallsback to the PBS version 3 and 4
> compatible parsing, as the client never used `http-only` tickets.
I thought this field was introduced only with http-only tickets, so why
is it not a reliable indicator and shouldn't *that* be fixed instead?
>
> Since this fixes token generation and ACLs setting via the remote add wizard,
> revert the now outdated warning of PBS v4 minimum requirement.
>
> Changes since version 1:
> - Fix check for CompatMode::Pbs3Ticket in response ticket parsing, must skip the
> http-only path.
> - Set the compatibility mode on the client, not the login. The client propagates
> the compat mode to the login on login() calls. Since that incorrectly set the
> state, the PBS logic worked nevertheless during testing, but also affected the
> PVE state, which was not intended.
>
> proxmox:
>
> Christian Ebner (3):
> proxmox-login: refactor PVE TFA compat mode
> proxmox-client: adapt to new compat mode introduced for proxmox-login
> proxmox-login: add compat mode to fallback to PBS3 ticket parsing
>
> proxmox-client/src/client.rs | 12 ++++----
> proxmox-client/src/lib.rs | 2 +-
> proxmox-login/src/lib.rs | 55 +++++++++++++++++++++++++-----------
> 3 files changed, 45 insertions(+), 24 deletions(-)
>
>
> datacenter-manager:
>
> Christian Ebner (3):
> server: adapt to proxmox-client compat mode changes
> server: pbs-client: check and fallback to PBS v3 ticket compat mode
> Revert "ui: add wizard: note that login currently only works for PBS
> 4"
>
> server/src/connection.rs | 31 +++++++++++++++++++-----------
> ui/src/remotes/wizard_page_info.rs | 15 ---------------
> 2 files changed, 20 insertions(+), 26 deletions(-)
>
>
> Summary over all repositories:
> 5 files changed, 65 insertions(+), 50 deletions(-)
>
> --
> Generated by git-murpp 0.8.1
_______________________________________________
pdm-devel mailing list
pdm-devel@lists.proxmox.com
https://lists.proxmox.com/cgi-bin/mailman/listinfo/pdm-devel
next prev parent reply other threads:[~2025-09-30 11:49 UTC|newest]
Thread overview: 12+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-09-30 8:02 Christian Ebner
2025-09-30 8:02 ` [pdm-devel] [PATCH proxmox v2 1/3] proxmox-login: refactor PVE TFA compat mode Christian Ebner
2025-09-30 8:02 ` [pdm-devel] [PATCH proxmox v2 2/3] proxmox-client: adapt to new compat mode introduced for proxmox-login Christian Ebner
2025-09-30 8:02 ` [pdm-devel] [PATCH proxmox v2 3/3] proxmox-login: add compat mode to fallback to PBS3 ticket parsing Christian Ebner
2025-09-30 8:02 ` [pdm-devel] [PATCH datacenter-manager v2 1/3] server: adapt to proxmox-client compat mode changes Christian Ebner
2025-09-30 8:02 ` [pdm-devel] [PATCH datacenter-manager v2 2/3] server: pbs-client: check and fallback to PBS v3 ticket compat mode Christian Ebner
2025-09-30 8:02 ` [pdm-devel] [PATCH datacenter-manager v2 3/3] Revert "ui: add wizard: note that login currently only works for PBS 4" Christian Ebner
2025-09-30 11:49 ` Wolfgang Bumiller [this message]
2025-09-30 12:19 ` [pdm-devel] [PATCH datacenter-manager/proxmox v2 0/6] pbs client: fix PBS version 3 login ticket parsing compatibility Christian Ebner
2025-09-30 12:34 ` Thomas Lamprecht
2025-10-01 9:33 ` Shannon Sterz
2025-10-01 13:12 ` Shannon Sterz
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=5jmcsjt7cdnnxghl3hxxfdph2m5euzydxrnpltt2vorp6o7b6s@6fu6j2jlsrqz \
--to=w.bumiller@proxmox.com \
--cc=c.ebner@proxmox.com \
--cc=pdm-devel@lists.proxmox.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.