all lists on lists.proxmox.com
 help / color / mirror / Atom feed
From: "Shan Shaji" <s.shaji@proxmox.com>
To: "Shan Shaji" <s.shaji@proxmox.com>, <pdm-devel@lists.proxmox.com>
Subject: Re: [PATCH datacenter-manager] fix: api: allow non-pam users to access shell
Date: Tue, 23 Jun 2026 14:05:04 +0200	[thread overview]
Message-ID: <DJGEYBAAFRP6.2V2MIHO596OVP@proxmox.com> (raw)
In-Reply-To: <DJGA39O3XRDQ.3HGVYWZUVYQ09@proxmox.com>

 Superseded by v2: https://lore.proxmox.com/pdm-devel/20260623120314.305942-1-s.shaji@proxmox.com/T/#u

On Tue Jun 23, 2026 at 10:16 AM CEST, Shan Shaji wrote:
> Gentle ping, this still applies on master. We have a report related to
> this in bugzilla [1]
>
> - [1] https://bugzilla.proxmox.com/show_bug.cgi?id=7726
>
> On Wed Oct 8, 2025 at 4:09 PM CEST, Shan Shaji wrote:
>> Remove the explicit restriction that only pam users can access the
>> shell. This is safe to do, as all users that are not root@pam will
>> be shown with a login shell. So they need to have some (PAM) login
>> credentials available.
>>
>> This changes is useful for setups where a host integrates with central
>> authentication systems (e.g. LDAP or Active Directory) either as a PDM
>> realm or as a PAM plugin. It also allows environments that favor
>> non-pam users for PDM by default, but still want to keep PAM
>> accounts available for admnistrators.
>>
>> Reference: pve-manager commit (7914f5e7b) and proxmox-backup commit
>> (c77dfaf31), these commits are already applied for PVE and PBS.
>>





  reply	other threads:[~2026-06-23 12:05 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2025-10-08 14:09 [pdm-devel] [PATCH datacenter-manager] fix: api: allow non-pam users to access shell Shan Shaji
2026-06-23  8:16 ` Shan Shaji
2026-06-23 12:05   ` Shan Shaji [this message]
2026-06-23 11:03 ` [pdm-devel] " Dominik Csapak

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=DJGEYBAAFRP6.2V2MIHO596OVP@proxmox.com \
    --to=s.shaji@proxmox.com \
    --cc=pdm-devel@lists.proxmox.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.
Service provided by Proxmox Server Solutions GmbH | Privacy | Legal