From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from gate001.proxmox.com (gate001.proxmox.com [IPv6:2a0f:8001:1:32::40]) by lore.proxmox.com (Postfix) with ESMTPS id 3E3BD1FF0E9 for ; Thu, 30 Jul 2026 08:40:44 +0200 (CEST) Received: from gate001.proxmox.com (localhost.localdomain [127.0.0.1]) by gate001.proxmox.com (Proxmox) with ESMTP id 96D58214C5; Thu, 30 Jul 2026 08:40:24 +0200 (CEST) From: Marco Gaiarin Subject: PVE and AD domain join... Date: Wed, 29 Jul 2026 11:03:50 +0200 Organization: Il gaio usa sempre TIN per le liste, fallo anche tu!!! Message-ID: X-Trace: eraldo.lilliput.linux.it 1785391832 4067041 192.168.1.45 (30 Jul 2026 06:10:32 GMT) X-Mailer: tin/2.6.4-20240224 ("Banff") (Linux/7.0.0-28-generic (x86_64)) X-Gateway-System: SmartGate 1.4.5 To: pve-user@lists.proxmox.com X-SPAM-LEVEL: Spam detection results: 1 DATE_IN_PAST_12_24 0.804 Date: is 12 to 24 hours before Received: date DMARC_PASS -0.1 DMARC pass policy JMQ_SPF_NEUTRAL 0.5 SPF set to ?all KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment (newer systems) SPF_HELO_PASS -0.001 SPF: HELO matches SPF record SPF_PASS -0.001 SPF: sender matches SPF record Message-ID-Hash: HB6IYFTDKEXHJH4EWMKO6RGEVEOX7ZJP X-Message-ID-Hash: HB6IYFTDKEXHJH4EWMKO6RGEVEOX7ZJP X-MailFrom: gaio@lilliput.linux.it X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.10 Precedence: list List-Id: Proxmox VE user list List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: I've read a bit PVE9 changelogs, impressive! We have some sets of asymmetric clusters, composed by two 'new' servers that do horsepower, and a third, tipically old, server that do mostly quorum and disk space for backup. For better manage some aspects of our backup we are thinking to join that third node via SSSD/Winbind to our AD domain, adding samba shares of some stuff. I've read wikis and forums, and seems to me that this is not explicitly promoted nor forbidden: still PVE9 use AD accounts directly, and forums are full of people that have joined one node (or the cluster) via SSSD/Winbind. I'm asking explicitly if i could get some trouble doing this; for example: 1) if i join only one server in a cluster, i can get trouble; 2) the pretty high UID/GID generated by SSSD/Winbind for users and groups can be problematic for LXC, because could clash. Having some experience on Debian and PVE, seems to me that there will no trouble at all. But i prefere to ask. Thanks. --