From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) by lore.proxmox.com (Postfix) with ESMTPS id DEDDD1FF187 for ; Mon, 22 Sep 2025 17:06:43 +0200 (CEST) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 7141F1F7E8; Mon, 22 Sep 2025 17:07:13 +0200 (CEST) Mime-Version: 1.0 Date: Mon, 22 Sep 2025 17:06:40 +0200 To: "Shannon Sterz" , Message-Id: X-Mailer: aerc 0.20.0 References: <20250916144827.551806-1-s.sterz@proxmox.com> In-Reply-To: <20250916144827.551806-1-s.sterz@proxmox.com> From: "Shannon Sterz" X-Bm-Milter-Handled: 55990f41-d878-4baa-be0a-ee34c49e34d2 X-Bm-Transport-Timestamp: 1758553588658 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.058 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Subject: [pdm-devel] Superseded: Re: [PATCH datacenter-manager/proxmox/yew-comp 00/11] Add LDAP and AD realm support to Proxmox Datacenter Manager X-BeenThere: pdm-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox Datacenter Manager development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Proxmox Datacenter Manager development discussion Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: pdm-devel-bounces@lists.proxmox.com Sender: "pdm-devel" Superseded-by: https://lore.proxmox.com/pdm-devel/20250922150519.399573-2-s.sterz@proxmox.com/T/#u On Tue Sep 16, 2025 at 4:48 PM CEST, Shannon Sterz wrote: > this patch series adds ldap and active directory (ad) support to proxmox > datacenter manager. the series first moves some of the sync logic for > ldap & ad realms out of proxmox backup manager into the proxmox-ldap > crate. > > the next series of patches fixes up the existing proxmox-yew-comp > components for adding and editing realms to function as intended for > adding, editing, removing and syncing ad and ldap realms. > > finally, we add the necessary backend infrastructure and api endpoints > to proxmox datacenter manager and expose the new ui components there. > > this series does not yet move proxmox backup server to use the new > common crate. doing so would mean that proxmox backup server would also > need to start using proxmox-access-control, which would be a lot more > involved and is beste handled in a separate series in my opinion. > > proxmox: > > Shannon Sterz (1): > ldap: add types and sync features > > Cargo.toml | 2 +- > proxmox-ldap/Cargo.toml | 22 ++ > proxmox-ldap/debian/control | 31 ++- > proxmox-ldap/debian/copyright | 2 +- > proxmox-ldap/src/lib.rs | 6 + > proxmox-ldap/src/sync.rs | 496 ++++++++++++++++++++++++++++++++++ > proxmox-ldap/src/types.rs | 317 ++++++++++++++++++++++ > 7 files changed, 873 insertions(+), 3 deletions(-) > create mode 100644 proxmox-ldap/src/sync.rs > create mode 100644 proxmox-ldap/src/types.rs > > > proxmox-yew-comp: > > Shannon Sterz (5): > auth_view: add default column and allow setting ldap realms as default > utils: add pdm realm to `get_auth_domain_info` > auth_view/auth_edit_ldap: add support for active directory realms > auth_edit_ldap: add helpers to properly edit ad & ldap realms > auth_view: implement syncing ldap and ad realms > > src/auth_edit_ldap.rs | 165 ++++++++++++++++++++++++++++++++----- > src/auth_view.rs | 174 +++++++++++++++++++++++++++++++++++++--- > src/common_api_types.rs | 3 + > src/utils.rs | 18 ++--- > 4 files changed, 315 insertions(+), 45 deletions(-) > > > proxmox-datacenter-manager: > > Shannon Sterz (5): > config: add domain config plugins for ldap and ad realms > server: add ldap and active directory authenticators > server: api: add api endpoints for configuring ldap & ad realms > api/auth: add endpoint to start ldap sync jobs > ui: add a panel to allow handling realms > > Cargo.toml | 1 + > lib/pdm-api-types/src/acl.rs | 3 + > lib/pdm-api-types/src/lib.rs | 7 + > lib/pdm-config/Cargo.toml | 1 + > lib/pdm-config/src/domains.rs | 35 +++ > server/Cargo.toml | 1 + > server/src/api/access/domains.rs | 90 ++++++- > server/src/api/config/access/ad.rs | 355 +++++++++++++++++++++++++ > server/src/api/config/access/ldap.rs | 372 +++++++++++++++++++++++++++ > server/src/api/config/access/mod.rs | 8 +- > server/src/auth/ldap.rs | 315 +++++++++++++++++++++++ > server/src/auth/mod.rs | 17 +- > ui/src/configuration/mod.rs | 14 +- > 13 files changed, 1210 insertions(+), 9 deletions(-) > create mode 100644 server/src/api/config/access/ad.rs > create mode 100644 server/src/api/config/access/ldap.rs > create mode 100644 server/src/auth/ldap.rs > > > Summary over all repositories: > 24 files changed, 2398 insertions(+), 57 deletions(-) > > -- > Generated by git-murpp 0.8.1 _______________________________________________ pdm-devel mailing list pdm-devel@lists.proxmox.com https://lists.proxmox.com/cgi-bin/mailman/listinfo/pdm-devel