From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <pve-devel-bounces@lists.proxmox.com> Received: from firstgate.proxmox.com (firstgate.proxmox.com [IPv6:2a01:7e0:0:424::9]) by lore.proxmox.com (Postfix) with ESMTPS id 784601FF16E for <inbox@lore.proxmox.com>; Mon, 17 Mar 2025 13:18:50 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id B3EE31B84; Mon, 17 Mar 2025 13:18:38 +0100 (CET) Date: Mon, 17 Mar 2025 13:18:00 +0100 From: Fabian =?iso-8859-1?q?Gr=FCnbichler?= <f.gruenbichler@proxmox.com> To: Mira Limbeck <m.limbeck@proxmox.com>, Proxmox VE development discussion <pve-devel@lists.proxmox.com> References: <20250211054029.1269099-1-thomas@atskinner.net> <20250211054029.1269099-4-thomas@atskinner.net> <f3732723-d617-47a9-a7be-652f0893b6ed@proxmox.com> <542246635.6628.1739444630435@webmail.proxmox.com> In-Reply-To: <542246635.6628.1739444630435@webmail.proxmox.com> MIME-Version: 1.0 User-Agent: astroid/0.16.0 (https://github.com/astroidmail/astroid) Message-Id: <1742213599.xagtk502vp.astroid@yuna.none> X-SPAM-LEVEL: Spam detection results: 0 AWL 0.043 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment RCVD_IN_VALIDITY_CERTIFIED_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_RPBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_SAFE_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [openid.pm, plugin.pm, accesscontrol.pm, proxmox.com] Subject: Re: [pve-devel] [PATCH access-control v3 1/1] fix #4411: openid: add logic for openid groups support X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion <pve-devel.lists.proxmox.com> List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pve-devel>, <mailto:pve-devel-request@lists.proxmox.com?subject=unsubscribe> List-Archive: <http://lists.proxmox.com/pipermail/pve-devel/> List-Post: <mailto:pve-devel@lists.proxmox.com> List-Help: <mailto:pve-devel-request@lists.proxmox.com?subject=help> List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel>, <mailto:pve-devel-request@lists.proxmox.com?subject=subscribe> Reply-To: Proxmox VE development discussion <pve-devel@lists.proxmox.com> Cc: Thomas Skinner <thomas@atskinner.net> Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: pve-devel-bounces@lists.proxmox.com Sender: "pve-devel" <pve-devel-bounces@lists.proxmox.com> T24gRmVicnVhcnkgMTMsIDIwMjUgMTI6MDMgcG0sIEZhYmlhbiBHcsO8bmJpY2hsZXIgd3JvdGU6 Cj4gCj4+IE1pcmEgTGltYmVjayA8bS5saW1iZWNrQHByb3htb3guY29tPiBoYXQgYW0gMTIuMDIu MjAyNSAxNTo1MSBDRVQgZ2VzY2hyaWViZW46Cj4+IAo+PiAgCj4+IE9uIDIvMTEvMjUgMDY6NDAs IFRob21hcyBTa2lubmVyIHdyb3RlOgo+PiA+IFNpZ25lZC1vZmYtYnk6IFRob21hcyBTa2lubmVy IDx0aG9tYXNAYXRza2lubmVyLm5ldD4KPj4gPiAtLS0KPj4gPiAgc3JjL1BWRS9BUEkyL09wZW5J ZC5wbSAgIHwgNzkgKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKwo+PiA+ ICBzcmMvUFZFL0FjY2Vzc0NvbnRyb2wucG0gfCAgMiArLQo+PiA+ICBzcmMvUFZFL0F1dGgvT3Bl bklkLnBtICAgfCAzMyArKysrKysrKysrKysrKysrKwo+PiA+ICBzcmMvUFZFL0F1dGgvUGx1Z2lu LnBtICAgfCAgMSArCj4+ID4gIDQgZmlsZXMgY2hhbmdlZCwgMTE0IGluc2VydGlvbnMoKyksIDEg ZGVsZXRpb24oLSkKPj4gPiAKPj4gPiBkaWZmIC0tZ2l0IGEvc3JjL1BWRS9BUEkyL09wZW5JZC5w bSBiL3NyYy9QVkUvQVBJMi9PcGVuSWQucG0KPj4gPiBpbmRleCA3NzQxMGU2Li44MTgxNzVlIDEw MDY0NAo+PiA+IC0tLSBhL3NyYy9QVkUvQVBJMi9PcGVuSWQucG0KPj4gPiArKysgYi9zcmMvUFZF L0FQSTIvT3BlbklkLnBtCj4+ID4gQEAgLTEzLDYgKzEzLDcgQEAgdXNlIFBWRTo6Q2x1c3RlciBx dyhjZnNfcmVhZF9maWxlIGNmc193cml0ZV9maWxlKTsKPj4gPiAgdXNlIFBWRTo6QWNjZXNzQ29u dHJvbDsKPj4gPiAgdXNlIFBWRTo6SlNPTlNjaGVtYSBxdyhnZXRfc3RhbmRhcmRfb3B0aW9uKTsK Pj4gPiAgdXNlIFBWRTo6QXV0aDo6UGx1Z2luOwo+PiA+ICt1c2UgUFZFOjpBdXRoOjpPcGVuSWQ7 Cj4+ID4gIAo+PiA+ICB1c2UgUFZFOjpSRVNUSGFuZGxlcjsKPj4gPiAgCj4+ID4gQEAgLTIyMCw2 ICsyMjEsODQgQEAgX19QQUNLQUdFX18tPnJlZ2lzdGVyX21ldGhvZCAoewo+PiA+ICAJCSRycGNl bnYtPmNoZWNrX3VzZXJfZW5hYmxlZCgkdXNlcm5hbWUpOwo+PiA+ICAJICAgIH0KPj4gPiAgCj4+ ID4gKwkgICAgaWYgKGRlZmluZWQobXkgJGdyb3Vwc19jbGFpbSA9ICRjb25maWctPnsnZ3JvdXBz LWNsYWltJ30pKSB7Cj4+ID4gKwkJaWYgKGRlZmluZWQobXkgJGdyb3Vwc19saXN0ID0gJGluZm8t PnskZ3JvdXBzX2NsYWltfSkpIHsKPj4gPiArCQkgICAgaWYgKHJlZigkZ3JvdXBzX2xpc3QpIGVx ICdBUlJBWScpIHsKPj4gPiArCQkJUFZFOjpBY2Nlc3NDb250cm9sOjpsb2NrX3VzZXJfY29uZmln KHN1YiB7Cj4+ID4gKwkJCSAgICBteSAkdXNlcmNmZyA9IGNmc19yZWFkX2ZpbGUoInVzZXIuY2Zn Iik7Cj4+ID4gKwo+PiA+ICsJCQkgICAgIyByZXBsYWNlIGFueSBpbnZhbGlkIGNoYXJhY3RlcnMg d2l0aAo+PiA+ICsJCQkgICAgbXkgJHJlcGxhY2VfY2hhcmFjdGVyID0gJGNvbmZpZy0+eydncm91 cHMtcmVwbGFjZS1jaGFyYWN0ZXInfSAvLyAnXyc7Cj4+ID4gKwkJCSAgICBteSAkb2lkY19ncm91 cHMgPSB7IG1hcCB7IAo+PiA+ICsJCQkJJF8gPX4gcy9bXiRQVkU6OkF1dGg6OlBsdWdpbjo6Z3Jv dXBuYW1lX3JlZ2V4X2NoYXJzXS8kcmVwbGFjZV9jaGFyYWN0ZXIvZ3IgPT4gMQo+PiA+ICsJCQkg ICAgfSAkZ3JvdXBzX2xpc3QtPkAqIH07Cj4+IG1heWJlIHdlIGNvdWxkIGxvZyBhbnkgb2YgdGhv c2UgcmVwbGFjZW1lbnRzIGhlcmU/IGRvaW5nIHRoaXMgc2lsZW50bHkKPj4gbWF5IGxlYWQgdG8g Y29uZnVzaW9uIHdoZW4gZ3JvdXBzIGRvbid0IG1hdGNoCj4gCj4gYSBzaW1pbGFyIGlzc3VlIGlz IGZpbGVkIGZvciBMREFQL0FEIHN5bmMgYXMgd2VsbCAtIGFuZCBJIG5vdyB3b25kZXIgYmFzZWQg b24gdGhlIGRpc2N1c3Npb24gdGhlcmUgLSBkbyB3ZSByZWFsbHkgd2FudCB0byBtYWtlIHRoaXMg Y29uZmlndXJhYmxlPyBob3cgZG8gd2Ugd2FudCB0byBoYW5kbGUgY29uZmxpY3RzPyB3aGlsZSBp dCdzIGEgYml0IGxlc3MgY3JpdGljYWwgZm9yIHR3byBvciBtb3JlIE9JREMgZ3JvdXBzIHRvIGJl IG1hcHBlZCB0byB0aGUgc2FtZSBQVkUtc2lkZSBncm91cCAoY29tcGFyZWQgdG8gdGhlIHNhbWUg aGFwcGVuaW5nIHdpdGggdXNlcnMgOykpLCBpZiBpdCdzIHBvc3NpYmxlIHRvIGF2b2lkIGl0IHRo YXQgd291bGQgc3RpbGwgYmUgZ3JlYXQuLgo+IAo+IGdyb3VwcyBjdXJyZW50bHkgYWxsb3cgLi1f IGFzIHNwZWNpYWwgY2hhcmFjdGVycywgc28gd2UgY291bGQgZGVzaWduYXRlIG9uZSBvZiB0aGVt IGFzIGVzY2FwZSBjaGFyYWN0ZXIgYW5kIHRoZW4gaGF2ZSBhIHVuaXF1ZSBtYXBwaW5nIGZvciBl YWNoIGNoYXJhY3RlciB0aGF0IGlzbid0IGFsbG93ZWQgb24gdGhlIFBWRSBzaWRlIChpbmNsdWRp bmcgdGhhdCBlc2NhcGUgY2hhcmFjdGVyIDspKQo+IAo+IGUuZy4sIGFuIE9JREMgZ3JvdXAgY2Fs bGVkICJmb28gYmFyIiBjb3VsZCBiZSBlbmNvZGVkIGFzICJmb29fMzJfYmFyIiAod2hlcmUgMzIg aXMgaGV4IGZvciBBU0NJSS0iICIpLiBjb3JyZXNwb25kaW5nbHksIGEgZ3JvdXAgY2FsbGVkICJm b29fYmFyIiB3b3VsZCBuZWVkIHRvIGJlIGVuY29kZWQgYXMgImZvb181Rl9iYXIiLiAodGhlIHNl Y29uZCAnXycgY291bGQgb2YgY291cnNlIGJlIGxlZnQgb2ZmIGlmIGRlc2lyZWQpLgo+IAo+IHVu Zm9ydHVuYXRlbHksIGFkZGluZyBhbiBlbnRpcmVseSBuZXcgZXNjYXBlIGNoYXJhY3RlciBpcyBu b3QgcmVhbGx5IHBvc3NpYmxlIHVubGVzcyB3ZSB3YW50IHRvIHdhaXQgZm9yIDkuMCwgYXMgdGhh dCB3b3VsZCB0aGVuIGJyZWFrIHBhcnNpbmcgb2YgdXNlci5jZmcgaW4gYSBtaXhlZCBjbHVzdGVy IHdoaWNoIGNhbiBoYXZlIHJlYWxseSBkYW5nZXJvdXMgc2lkZS1lZmZlY3RzLi4KPiAKPiBvciB3 ZSBjb3VsZCBsaXZlIHdpdGggc3VjaCBhIHBvdGVudGlhbGx5IGxvc3N5IG1hcHBpbmcsIGJ1dCB0 aGVuIEkgYW0gbm90IHN1cmUgd2hldGhlciBhIHNpbmdsZSwgaGFyZC1jb2RlZCwgZG9jdW1lbnRl ZCB2YWx1ZSB3b3VsZG4ndCBiZSBiZXR0ZXI/IHRoZSBtYWluIGlzc3VlIHdpdGggdGhhdCBpcyBp ZiB5b3UgYWxsb3cgKHVucHJpdmlsZWdlZCkgY3JlYXRpb24gYW5kIGpvaW5pbmcgb2YgZ3JvdXBz IG9uIHRoZSBPSURDIHNpZGUsIGFzIHRoZW4gaWYgdGhlcmUgYWxyZWFkeSBpcyBhIGdyb3VwIGNh bGxlZCAiU3lzdGVtIEFkbWluaXN0cmF0b3JzIiB0aGF0IGdvdCBtYXBwZWQgdG8gIlN5c3RlbV9B ZG1pbnN0cmF0b3JzIiBvbiB0aGUgUFZFIHNpZGUsIGEgdXNlciBjb3VsZCBjcmVhdGUgYW5kIGpv aW4gIlN5c3RlbSFBZG1pbmlzdHJhdG9ycyIgb24gdGhlIE9JREMgc2lkZSBhbmQgZ2V0IG1hcHBl ZCB0byB0aGUgZXhpc3RpbmcsIHByb2JhYmx5IHByaXZpbGVnZWQgIlN5c3RlbV9BZG1pbmlzdHJh dG9ycyIgZ3JvdXAuLgoKdGhpcyBwYXJ0IG5vdyBnb3Qgc3BsaXQgb3V0IGludG8gaXRzIG93biBk aXNjdXNzaW9uOgoKaHR0cHM6Ly9sb3JlLnByb3htb3guY29tL3B2ZS1kZXZlbC9iOGZiYTlmNi02 YzgzLTQ4NDYtOTIzZi0yZjdiOTM4NTZiY2ZAcHJveG1veC5jb20vVC8jdQoKd2hhdCBkbyB5b3Ug dGhpbmsgYWJvdXQgdGhlIGZvbGxvd2luZyB0byBub3Qga2VlcCB0aGlzIGJsb2NrZWQgbG9uZ2Vy OgoKLSByZWJhc2UgdGhpcyBzZXJpZXMKLSBkcm9wIHRoZSBuYW1lIG1hbmdsaW5nLy4uIHBhcnQg Zm9yIG5vdywgYW5kIG9ubHkgYWxsb3cgZ3JvdXBzIHRoYXQKICB3b3JrIHdpdGggdGhlIFBWRSBj b25zdHJhaW50cyBmb3IgdGhlIHRpbWUgYmVpbmcKCndlIGNhbiBpbXBsZW1lbnQgaXQgd2hlbiB3 ZSd2ZSBkZWNpZGVkIGhvdyB0byBoYW5kbGUgdGhlIG5hbWUKbWFuZ2xpbmcvY29sbGlzaW9uLy4u IGlzc3VlLCBhbmQgZW5zdXJlIHdlIGdldCBhIGNvbnNpc3RlbnQKaW1wbGVtZW50YXRpb24gZm9y IGJvdGggTERBUC9BRCBhbmQgT0lEQy4KCgoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX18KcHZlLWRldmVsIG1haWxpbmcgbGlzdApwdmUtZGV2ZWxAbGlzdHMu cHJveG1veC5jb20KaHR0cHM6Ly9saXN0cy5wcm94bW94LmNvbS9jZ2ktYmluL21haWxtYW4vbGlz dGluZm8vcHZlLWRldmVsCg==