From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <mhill@inett.de>
Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68])
 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
 key-exchange X25519 server-signature RSA-PSS (2048 bits))
 (No client certificate requested)
 by lists.proxmox.com (Postfix) with ESMTPS id 265DF69026
 for <pve-user@lists.proxmox.com>; Thu, 11 Feb 2021 11:52:26 +0100 (CET)
Received: from firstgate.proxmox.com (localhost [127.0.0.1])
 by firstgate.proxmox.com (Proxmox) with ESMTP id 12E601A9FE
 for <pve-user@lists.proxmox.com>; Thu, 11 Feb 2021 11:51:56 +0100 (CET)
Received: from EUR04-DB3-obe.outbound.protection.outlook.com
 (mail-db3eur04on061e.outbound.protection.outlook.com
 [IPv6:2a01:111:f400:fe0c::61e])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (No client certificate requested)
 by firstgate.proxmox.com (Proxmox) with ESMTPS id 9A1321A9F1
 for <pve-user@lists.proxmox.com>; Thu, 11 Feb 2021 11:51:55 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=inettGmbH.onmicrosoft.com; s=selector2-inettGmbH-onmicrosoft-com;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
 bh=VMaAR4doYmzvb/z+yM2gWesuLYIUE/4yXUSvR189OYY=;
 b=PJUU1SRrkSM7A+cDK9JgEcyx/7z42hRo2wvomOaIkSQSYpED0X7iQHGHjQV/Yja/T7VRYyQlEfIn71U/y3uRRwjYWQk9xhKGEHXCLid2mFT4q0Hv0ZXM09yX9yOPc7+WriSlJKQMYUjalDqbSmYEAQUJ0WxFcMOHd/xrWJSrnvY=
Received: from AM0PR10CA0025.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:208:17c::35)
 by VI1PR05MB5920.eurprd05.prod.outlook.com (2603:10a6:803:de::13)
 with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3825.20; Thu, 11 Feb
 2021 10:19:29 +0000
Received: from AM5EUR03FT062.eop-EUR03.prod.protection.outlook.com
 (2603:10a6:208:17c:cafe::53) by AM0PR10CA0025.outlook.office365.com
 (2603:10a6:208:17c::35) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3846.25 via Frontend
 Transport; Thu, 11 Feb 2021 10:19:29 +0000
X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 40.68.112.65)
 smtp.mailfrom=inett.de; lists.proxmox.com; dkim=pass (signature was verified)
 header.d=inettGmbH.onmicrosoft.com;lists.proxmox.com; dmarc=bestguesspass
 action=none header.from=inett.de;
Received-SPF: Pass (protection.outlook.com: domain of inett.de designates
 40.68.112.65 as permitted sender) receiver=protection.outlook.com;
 client-ip=40.68.112.65; helo=westeu12-emailsignatures-cloud.codetwo.com;
Received: from westeu12-emailsignatures-cloud.codetwo.com (40.68.112.65) by
 AM5EUR03FT062.mail.protection.outlook.com (10.152.17.120) with Microsoft SMTP
 Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
 15.20.3846.25 via Frontend Transport; Thu, 11 Feb 2021 10:19:29 +0000
Received: from EUR04-DB3-obe.outbound.protection.outlook.com (104.47.12.54) by
 westeu12-emailsignatures-cloud.codetwo.com with CodeTwo SMTP Server (TLS12)
 via SMTP; Thu, 11 Feb 2021 10:19:28 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
 b=LtFRDYudVLVXuklR/jlbYUMW1No2htdCN5j2ooMmZ5CI+xMmdNvCpkxuiyw+tpDT8pplZe9XaUNaHuenfUmwKWX0Ny/74aCYUoQf0STmxwTtfbKuMxGsvl34xPCzwWBvGgr9vw9asinysuT35gyeUaO7xOOlVTEIhF0a82juJhPTLMag82svn8ITiuz1kpxMoHHUB/qF0TdnDlum4+Ys36Sn0UmlGZ47nwEPaM0zMCELhDzJLNB3venCpL+cM5ylrBgyLQVVahFq00+6QqsxN3z334lGFpy3xhY12YilmOJOIXbtTCDqKKuDxoN0vJ5II8ofRi24jsfTr1bysQEqYQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; 
 s=arcselector9901;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
 bh=VMaAR4doYmzvb/z+yM2gWesuLYIUE/4yXUSvR189OYY=;
 b=Jcp8Yn3qYaYfhcgn0M2zMgZH+03R85Z65S13NReuJCmRdd7RT0ZJa57XcXQdPZByWxhdapp9yx18m7pAzCFZ7Im8vUI5ary9Dxwfjay91TgSGiPiRSlHULMMjY+BVbkxeTRx/BwNps6QxPBXfgHsizwa6W/mRXNzcWka/gDc9vQ2mxmX4br8ncel4KwNmkte5zmC38JUz7QMjPW/LczqpKVrYmdLDhJfGpmwwmhzaZrMuNn41d+goIg35kWxG9FovqNloLf8XL2s5/ay5QGw2GcbcE4JEaD/Wgam93U/ufVpQVTVIKW3tnkQbQltgicPNXFaIHAE1VxQ/an0iwowew==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass
 smtp.mailfrom=inett.de; dmarc=pass action=none header.from=inett.de;
 dkim=pass header.d=inett.de; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=inettGmbH.onmicrosoft.com; s=selector2-inettGmbH-onmicrosoft-com;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
 bh=VMaAR4doYmzvb/z+yM2gWesuLYIUE/4yXUSvR189OYY=;
 b=PJUU1SRrkSM7A+cDK9JgEcyx/7z42hRo2wvomOaIkSQSYpED0X7iQHGHjQV/Yja/T7VRYyQlEfIn71U/y3uRRwjYWQk9xhKGEHXCLid2mFT4q0Hv0ZXM09yX9yOPc7+WriSlJKQMYUjalDqbSmYEAQUJ0WxFcMOHd/xrWJSrnvY=
Authentication-Results-Original: lists.proxmox.com; dkim=none (message not
 signed) header.d=none;lists.proxmox.com; dmarc=none action=none
 header.from=inett.de;
Received: from AM0PR05MB5764.eurprd05.prod.outlook.com (2603:10a6:208:11c::31)
 by AM9PR05MB7715.eurprd05.prod.outlook.com (2603:10a6:20b:2d2::20)
 with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3846.26; Thu, 11 Feb
 2021 10:19:26 +0000
Received: from AM0PR05MB5764.eurprd05.prod.outlook.com
 ([fe80::d152:b551:4401:1ae8]) by AM0PR05MB5764.eurprd05.prod.outlook.com
 ([fe80::d152:b551:4401:1ae8%6]) with mapi id 15.20.3846.027; Thu, 11 Feb 2021
 10:19:26 +0000
Date: Thu, 11 Feb 2021 11:19:24 +0100
From: Maximilian Hill <mhill@inett.de>
To: pve-user@lists.proxmox.com
Message-ID: <YCUErLTBBRaK9gKo@inett.de>
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature"; boundary="apN1/GQoCBbU/1pg"
Content-Disposition: inline
User-Agent: Mutt/2.0.5 (da5e3282) (2021-01-21)
X-Originating-IP: [217.7.208.212]
X-ClientProxiedBy: PR3P189CA0040.EURP189.PROD.OUTLOOK.COM
 (2603:10a6:102:53::15) To AM0PR05MB5764.eurprd05.prod.outlook.com
 (2603:10a6:208:11c::31)
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
Received: from inett.de (217.7.208.212) by
 PR3P189CA0040.EURP189.PROD.OUTLOOK.COM (2603:10a6:102:53::15) with Microsoft
 SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
 15.20.3846.27 via Frontend Transport; Thu, 11 Feb 2021 10:19:26 +0000
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 7b9ee5e5-8473-4780-cc68-08d8ce768447
X-MS-TrafficTypeDiagnostic: AM9PR05MB7715:|VI1PR05MB5920:
X-Microsoft-Antispam-PRVS: <VI1PR05MB592038B13C461A302874BCF4DB8C9@VI1PR05MB5920.eurprd05.prod.outlook.com>
X-MS-Oob-TLC-OOBClassifiers: OLM:5797;OLM:5797;
X-MS-Exchange-SenderADCheck: 1
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original: 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
X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en;
 SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0PR05MB5764.eurprd05.prod.outlook.com;
 PTR:; CAT:NONE;
 SFS:(366004)(396003)(136003)(39830400003)(346002)(376002)(2906002)(26005)(6916009)(66556008)(66476007)(5660300002)(66946007)(8676002)(564344004)(956004)(2616005)(21480400003)(8886007)(83380400001)(8936002)(55016002)(16526019)(478600001)(186003)(36756003)(52116002)(7696005)(86362001)(316002)(44144004)(2700100001);
 DIR:OUT; SFP:1101; 
X-MS-Exchange-AntiSpam-MessageData: =?us-ascii?Q?wasZUeOkgtbneUPg9YaZ7KCTfraLtjxWp4sMiUspaTNOiwXkv0Ye1C8/mrak?=
 =?us-ascii?Q?6xN4wvHu7zVRKeWT1dTVokqI7K2EWPybHc6m8ZkrC+8U3cYyN119yugvtylW?=
 =?us-ascii?Q?2IhNPFM0RmZ0ggMrFFrGGWpk770zJKeGOrlVFGIq/r0+2qQ5sEdowJYNxep2?=
 =?us-ascii?Q?HPBtz6IW+rjSP2bTlqToOLVomcLBJt+SyDoBk7JKJ+gejJvyEeF+MQ0Ylzdt?=
 =?us-ascii?Q?J8I7MB8zZX8waahwU+GMCO6PEGXF3uqEwY0M/j25CXIgN2GCtLwNcpB2hI0S?=
 =?us-ascii?Q?TpE+mxO99PkN0+/oiLgfWjTFo+AbT85BsCiiLq10ekf2wP61rcdAAwWPhTf4?=
 =?us-ascii?Q?/1I9SWhy/Zkl0DyFgJvz2CFutjy0e9VplLgaGhGRbLeY9RyuiwY2VkoluaZM?=
 =?us-ascii?Q?lNM4SYT8WUJ2DBJatl189JLww0Wdd4CB4Z60MRcXseDUCjatvP8o9p641gzv?=
 =?us-ascii?Q?I9ZnUyjpKN51IzhGnrJkFY6wzXRtWBz3gRm0Othliy4W17qjcrwEkKRbP8BF?=
 =?us-ascii?Q?iF1ZS6z+zUM9mSaT7RvykUbBReeLh+17OJLfRPVdnjyUlhkQ7kQOcQQTETDH?=
 =?us-ascii?Q?mta4PcdaIrYnSPQ3wQOaYNhErGX1v/ExaDOVV4UvSbU6Cl9EkJAc40hs0WWb?=
 =?us-ascii?Q?CxDJAc62VD72KMWJcqK2CHdxVXwwGrRLC3aS7Opwm+/ybOvevFGWnIZDegNk?=
 =?us-ascii?Q?a+9cSer6rkkAzwqn1qcIXaM3P+OHTbYUF/2Ud++wWsATehZ0C58l7R5zhh72?=
 =?us-ascii?Q?GH7SVlcprJGuyiytG9N9rJyjApN6YubrIH/Yu5v4N6JYqyZ7dFCjI05d4NHg?=
 =?us-ascii?Q?F7Gc337fGHVchPYiZQb9QBwRqnZTWj34UO3QeS9aGcgMP96vnkln78fsntJu?=
 =?us-ascii?Q?zqftu18pPLd+FkNxLz2rgcf/GdAs+3a5V9o7V0yQovu0mpo4MrL4KOFDeraj?=
 =?us-ascii?Q?3imG/NQX0VEOB3N84WekIVZbzuXXFZkgdIIHQ2TCnllTuMZyv8mvZi8svqG1?=
 =?us-ascii?Q?lC4nU53QixZOklT7eznduoSD0jsm8JvmqKr/m+UBSvJQnIPOWOkDeek8aR+g?=
 =?us-ascii?Q?JsaItwxLCLKUhH12fXgPJMgkI/NkBmhX0m9LrULfwping7gYHlrEBXBxixGf?=
 =?us-ascii?Q?Xjk2ZMDEF6wXT/zcjd5IrwANE0EDX0qL65atthC+DMqyQkauE5a3QQzlnir0?=
 =?us-ascii?Q?oQZs7988jHLdcAKvErd6sAXUhlsF846q+f7aAV1YTVgMauSvB+Y5JU8gOgaC?=
 =?us-ascii?Q?bXBet8VUvyLXlxOCoj4hMQY0Zq3M4Jn+ZccTzPRmuA5/NuspkE4suaVrHaLl?=
 =?us-ascii?Q?c+J43GePXWTt5r/Ts6Zj6uLr?=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM9PR05MB7715
X-CodeTwo-MessageID: e162dd18-4c82-4f89-9d92-deffc97ad2d2.20210211101928@westeu12-emailsignatures-cloud.codetwo.com
X-CodeTwoProcessed: true
X-EOPAttributedMessage: 0
X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT062.eop-EUR03.prod.protection.outlook.com
X-MS-Office365-Filtering-Correlation-Id-Prvs: 75d1315e-eee1-4e6e-eb10-08d8ce768286
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:40.68.112.65; CTRY:NL; LANG:en; SCL:1; SRV:;
 IPV:NLI; SFV:NSPM; H:westeu12-emailsignatures-cloud.codetwo.com;
 PTR:westeu12-emailsignatures-cloud.codetwo.com; CAT:NONE;
 SFS:(136003)(376002)(39830400003)(396003)(346002)(36840700001)(46966006)(508600001)(36756003)(70206006)(186003)(16526019)(70586007)(83380400001)(8886007)(86362001)(7696005)(44144004)(26005)(47076005)(356005)(8936002)(36860700001)(82310400003)(7636003)(8676002)(7596003)(6916009)(2906002)(2616005)(564344004)(21480400003)(336012)(316002)(55016002)(956004)(5660300002)(2700100001);
 DIR:OUT; SFP:1101; 
X-OriginatorOrg: inett.de
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 11 Feb 2021 10:19:29.3556 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 7b9ee5e5-8473-4780-cc68-08d8ce768447
X-MS-Exchange-CrossTenant-Id: fbb4c88a-8c06-44c8-b416-5376f93313e0
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=fbb4c88a-8c06-44c8-b416-5376f93313e0; Ip=[40.68.112.65];
 Helo=[westeu12-emailsignatures-cloud.codetwo.com]
X-MS-Exchange-CrossTenant-AuthSource: AM5EUR03FT062.eop-EUR03.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR05MB5920
X-SPAM-LEVEL: Spam detection results:  0
 DKIM_SIGNED               0.1 Message has a DKIM or DK signature,
 not necessarily valid
 DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature
 MSGID_FROM_MTA_HEADER   0.001 Message-Id was added by a relay
 RCVD_IN_DNSWL_NONE     -0.0001 Sender listed at https://www.dnswl.org/,
 no trust
 SPF_HELO_PASS          -0.001 SPF: HELO matches SPF record
 SPF_PASS               -0.001 SPF: sender matches SPF record
Subject: [PVE-User] Shell without realm 'pam'
X-BeenThere: pve-user@lists.proxmox.com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Proxmox VE user list <pve-user.lists.proxmox.com>
List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pve-user>, 
 <mailto:pve-user-request@lists.proxmox.com?subject=unsubscribe>
List-Archive: <http://lists.proxmox.com/pipermail/pve-user/>
List-Post: <mailto:pve-user@lists.proxmox.com>
List-Help: <mailto:pve-user-request@lists.proxmox.com?subject=help>
List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-user>, 
 <mailto:pve-user-request@lists.proxmox.com?subject=subscribe>
X-List-Received-Date: Thu, 11 Feb 2021 10:52:26 -0000

--apN1/GQoCBbU/1pg
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

Hello,

is it, somehow, possible, to allow users in a specific group to use the
shell without signing in in realm 'pam'?

Specifically, we need to use it with an AD realm.


Regards,

Maximilian

--apN1/GQoCBbU/1pg
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEC4+nzzlDLVCczVokaOY/9WPFgE8FAmAlBKsACgkQaOY/9WPF
gE9ATxAAs8+Dxaq16SJ9fJRKi6gBEpHzkiVS63LDMvHeKeUzWf8tHPoVbQt8Usdz
vvOwliRjwb1zpj1F9ecRJe4pZ1Tb0OTaM0sG8URAwFq0E7CfGbrQUuJIpTfykPi9
nkxSrIiWoHcDN59XOBmB/Mgqv7T7igIXnl3t4CTjmqHuQRho/hhNCIb3v56CHloB
FbM89ntH2BPcOtEQ5FEaEvhVO9NJF0duihnRltbnKv0d7kKY+lA7ytEHlYkfcCDm
rJuO/5/G1ckUviNgVrHHpxzmsWdrob0WTVSOINF0MrzkfGJJN6ipa+3qIZOznEnJ
wjuRHVIY+wWMTkLILtHxDu7cZGZhZmo9WDW28BUMINE+b2S/XCmMGyFv9QDCG69e
zDFvc1+9C/CoRtAm9y+b2wex6EArDmuAuS1uwEcZvEUFgxCXZ6d0HmpjF8F/VXpK
d5hxVV02nlYOc/fixYCFihh/TC8FGOXfWpug+lEItfK8oM7ElKPx6juYIYmYLBs8
tcCitQHLfqlRvydPEUhG5G0Qk2HNicUNe3pjRNv6NL2Q2e3QhR7A1tXYt21o+gLV
z49obGSOecJZMHtl0vGpELg5oHf/Xh6IAMzzOueFx6YSaRtW+HzjkfIHWsgQ9DD9
9pVxRtC5h9CEYNVEtWI7Elxn7pcye9v1yAu8XbpqRFs9xn9dEfY=
=Luc/
-----END PGP SIGNATURE-----

--apN1/GQoCBbU/1pg--