From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <pve-devel-bounces@lists.proxmox.com> Received: from firstgate.proxmox.com (firstgate.proxmox.com [IPv6:2a01:7e0:0:424::9]) by lore.proxmox.com (Postfix) with ESMTPS id 6FC711FF16F for <inbox@lore.proxmox.com>; Thu, 27 Mar 2025 02:51:54 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 27FD11F20; Thu, 27 Mar 2025 02:51:47 +0100 (CET) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1743040298; x=1743645098; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=dnocUjcqEhad0GyXRpQ+SKfiBCOkVPB9sDNCWA9TKhA=; b=HKaghYLEO9W05DZk2JPV1lKHSAICftxZGS7jh+qHxFtvMb4trxCj2JIGQQndCxJnga Etv3Vddn0kswYuEg4Ec2/j/CbyxnAvCmZpfFDi6leEPQnWbtkjvaAWTFzEMq6Ok9eCEK HSi60WVghywopwsjYZJjkVbtxlu56fHi+unO3ZVQHBxWg1PEZjiLmA7r+XRob2IM/mD2 XP+EWtOgsRzOedcmjY2ZZPmsdmrUgTyKp7EF6o/s1XCdjeJGYPguWgvXyRu9MqIzaXZT cAlk8OoyeDcfq8zxwt9mfwsP2ujFuVUGYFkXN3XlDL3ks6EqopOuloH6/kchuYBfw73y bKgg== X-Gm-Message-State: AOJu0YyM/Ug0T+oRhtNOC8ltVyI71mkxg9QfMbdxmeixjH3HucQ3mdkD VbVdF6V7Kgfoktwcw3+jTbJD7CuClPvp3ab52n+SHGVDYq4eboLk+5ooMEXO X-Gm-Gg: ASbGncv3DXSChV+ry5X9bXt6AITbwDLHEciUsSSrQEHKwNH+FxYX1BDcvKUlMOc06ug QcCHn7DoFFOIsRvkBPOGC9CaHWmN7wS/g2sNpQg72zhN6g0wowxGv2BM+hENSmOPAI3GfBZzoaU G2zQkuErIQvO4XmZ8yEvQjC4wQXr5ocv6r7K+qfr6p2sjZhi1H1S2WOivKLDliD8oacAKzBmso8 lE6w4r2WDUo2TvLi3WFkJo3QWF4ItOaw4BqsrW9fe65GBjXFv7oTJ9XjbE+KFdFpRFK9LZNYWZQ sWZcMCR8eAMlqlKV6beQqL/hzwnlknN/Mm1PelnBkciRAVRh6N0o/1I3rLSqgCdcBR4rMV6iUnC sVO1Z6PM= X-Google-Smtp-Source: AGHT+IEbxJJfllMC7f2Y7pFIKEeEczS0WxGRaP00qHl26ffmSst8wM1oPUfwZO8UyCjuiWNSPPqKOw== X-Received: by 2002:a17:907:9409:b0:ac2:912d:5a80 with SMTP id a640c23a62f3a-ac6fae48262mr121805066b.5.1743040297876; Wed, 26 Mar 2025 18:51:37 -0700 (PDT) X-Received: by 2002:a05:6000:4211:b0:391:12a5:3cb3 with SMTP id ffacd0b85a97d-39ad173d283mr1251185f8f.3.1743040297385; Wed, 26 Mar 2025 18:51:37 -0700 (PDT) MIME-Version: 1.0 References: <20250324023728.1294436-1-thomas@atskinner.net> <1345234902.2549.1742920555171@webmail.proxmox.com> In-Reply-To: <1345234902.2549.1742920555171@webmail.proxmox.com> From: Thomas Skinner <thomas@atskinner.net> Date: Wed, 26 Mar 2025 20:51:10 -0500 X-Gmail-Original-Message-ID: <CALn9RMeuzL2Px7H+Fjg1Qq=0T8Amk6F8h1o4zNdibFTOXyuS-A@mail.gmail.com> X-Gm-Features: AQ5f1JqqSI8B8S1Wo-ZoV9LMXAl7RF95NyLn4uKvdGYwNggBQ942wkOWv5xmPsY Message-ID: <CALn9RMeuzL2Px7H+Fjg1Qq=0T8Amk6F8h1o4zNdibFTOXyuS-A@mail.gmail.com> To: Mira Limbeck <m.limbeck@proxmox.com> X-SPAM-LEVEL: Spam detection results: 0 AWL -0.028 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy FREEMAIL_FORGED_FROMDOMAIN 0.001 2nd level domains in From and EnvelopeFrom freemail headers are different FREEMAIL_FROM 0.001 Sender email is commonly abused enduser mail provider HEADER_FROM_DIFFERENT_DOMAINS 0.007 From and EnvelopeFrom 2nd level mail domains are different KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment RCVD_IN_DNSWL_NONE -0.0001 Sender listed at https://www.dnswl.org/, no trust RCVD_IN_MSPIKE_H3 0.001 Good reputation (+3) RCVD_IN_MSPIKE_WL 0.001 Mailspike good senders RCVD_IN_VALIDITY_CERTIFIED_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_RPBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_SAFE_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [plugin.pm, proxmox.com, lib.rs, openid.pm, accesscontrol.pm] Subject: Re: [pve-devel] [PATCH SERIES access-control/docs/manager/proxmox-openid v4] fix #4411: add support for openid groups X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion <pve-devel.lists.proxmox.com> List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pve-devel>, <mailto:pve-devel-request@lists.proxmox.com?subject=unsubscribe> List-Archive: <http://lists.proxmox.com/pipermail/pve-devel/> List-Post: <mailto:pve-devel@lists.proxmox.com> List-Help: <mailto:pve-devel-request@lists.proxmox.com?subject=help> List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel>, <mailto:pve-devel-request@lists.proxmox.com?subject=subscribe> Reply-To: Proxmox VE development discussion <pve-devel@lists.proxmox.com> Cc: Proxmox VE development discussion <pve-devel@lists.proxmox.com> Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: pve-devel-bounces@lists.proxmox.com Sender: "pve-devel" <pve-devel-bounces@lists.proxmox.com> T24gVHVlLCBNYXIgMjUsIDIwMjUgYXQgMTE6MzbigK9BTSBNaXJhIExpbWJlY2sgPG0ubGltYmVj a0Bwcm94bW94LmNvbT4gd3JvdGU6Cj4KPiA+IFRob21hcyBTa2lubmVyIDx0aG9tYXNAYXRza2lu bmVyLm5ldD4gaGF0IGFtIDI0LjAzLjIwMjUgMDM6MzcgQ0VUIGdlc2NocmllYmVuOgo+ID4KPiA+ Cj4gPiBDaGFuZ2VzIHNpbmNlIHYzOgo+ID4gLSByZW1vdmVkIGFsbCBjb2RlL3NldHRpbmdzL2Rv Y3MgZm9yIGdyb3VwIG5hbWUgcmVwbGFjZW1lbnQgY2hhcmFjdGVycwo+ID4gLSBjb25kaXRpb25h bGx5IHByaW50IHVzZXIgYWRkZWQgdG8gZ3JvdXBzIG1lc3NhZ2UKPiA+Cj4gPiBhY2Nlc3MtY29u dHJvbDoKPiA+Cj4gPiBUaG9tYXMgU2tpbm5lciAoMSk6Cj4gPiAgIGZpeCAjNDQxMTogb3Blbmlk OiBhZGQgbG9naWMgZm9yIG9wZW5pZCBncm91cHMgc3VwcG9ydAo+ID4KPiA+ICBzcmMvUFZFL0FQ STIvT3BlbklkLnBtICAgfCA4MyArKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr KysrCj4gPiAgc3JjL1BWRS9BY2Nlc3NDb250cm9sLnBtIHwgIDIgKy0KPiA+ICBzcmMvUFZFL0F1 dGgvT3BlbklkLnBtICAgfCAyNSArKysrKysrKysrKysKPiA+ICBzcmMvUFZFL0F1dGgvUGx1Z2lu LnBtICAgfCAgMSArCj4gPiAgNCBmaWxlcyBjaGFuZ2VkLCAxMTAgaW5zZXJ0aW9ucygrKSwgMSBk ZWxldGlvbigtKQo+ID4KPiA+Cj4gPiBkb2NzOgo+ID4KPiA+IFRob21hcyBTa2lubmVyICgxKToK PiA+ICAgZml4ICM0NDExOiBvcGVuaWQ6IGFkZCBkb2NzIGZvciBvcGVuaWQgZ3JvdXBzIHN1cHBv cnQKPiA+Cj4gPiAgcHZldW0uYWRvYyB8IDM3ICsrKysrKysrKysrKysrKysrKysrKysrKysrKysr KysrKysrKysKPiA+ICAxIGZpbGUgY2hhbmdlZCwgMzcgaW5zZXJ0aW9ucygrKQo+ID4KPiA+Cj4g PiBtYW5hZ2VyOgo+ID4KPiA+IFRob21hcyBTa2lubmVyICgxKToKPiA+ICAgZml4ICM0NDExOiBv cGVuaWQ6IGFkZCB1aSBjb25maWcgZm9yIG9wZW5pZCBncm91cHMgc3VwcG9ydAo+ID4KPiA+ICB3 d3cvbWFuYWdlcjYvZGMvQXV0aEVkaXRPcGVuSWQuanMgfCAzNCArKysrKysrKysrKysrKysrKysr KysrKysrKysrLS0tCj4gPgo+ID4KPiA+IHByb3htb3gtb3BlbmlkOgo+ID4KPiA+IFRob21hcyBT a2lubmVyICgxKToKPiA+ICAgZml4ICM0NDExOiBvcGVuaWQ6IGFkZCBsaWJyYXJ5IGNvZGUgZm9y IGdlbmVyaWMgaWQgdG9rZW4gY2xhaW0gc3VwcG9ydAo+ID4KPiA+ICBwcm94bW94LW9wZW5pZC9z cmMvbGliLnJzIHwgNTUgKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrLS0tLS0tCj4g PiAtLQo+ID4gMi4zOS41Cj4gPgo+ID4KPiA+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fCj4gPiBwdmUtZGV2ZWwgbWFpbGluZyBsaXN0Cj4gPiBwdmUtZGV2 ZWxAbGlzdHMucHJveG1veC5jb20KPiA+IGh0dHBzOi8vbGlzdHMucHJveG1veC5jb20vY2dpLWJp bi9tYWlsbWFuL2xpc3RpbmZvL3B2ZS1kZXZlbAo+Cj4gVGhhbmsgeW91IGZvciB0aGUgdjQhCj4K PiBJIGdhdmUgaXQgYSBzcGluIHdpdGggQXV0aGVudGlrIGFnYWluIGFzIE9JREMgcHJvdmlkZXIu Cj4gSXQgYmVoYXZlZCBhcyBleHBlY3RlZCwgaW5jbHVkaW5nIHRoZSBsb2cgbWVzc2FnZSBmb3Ig aW52YWxpZCBncm91cAo+IG5hbWVzOgo+IGBgYAo+IE1hciAyNSAxNzoyNDoyNiBwdmU4MC1jZXBo MTgtc3RhZ2luZy0xIHB2ZWRhZW1vblszMTA3N106IG9wZW5pZCBncm91cAo+ICd0ZXN0ITIzNDUn IGNvbnRhaW5zIGludmFsaWQgY2hhcmFjdGVycwo+IGBgYAo+Cj4gT25lIHNtYWxsIGlzc3VlIHdp dGggdGhlIGRvY3MgcGF0Y2gsIGJ1dCBvdGhlciB0aGFuIHRoYXQ6Cj4KPiBUZXN0ZWQtYnk6IE1p cmEgTGltYmVjayA8bS5saW1iZWNrQHByb3htb3guY29tPgo+CgpTdWJtaXR0ZWQgYSB2NSB3aXRo IHRoZSBkb2MgZml4LiBUaGFua3MhCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXwpwdmUtZGV2ZWwgbWFpbGluZyBsaXN0CnB2ZS1kZXZlbEBsaXN0cy5wcm94 bW94LmNvbQpodHRwczovL2xpc3RzLnByb3htb3guY29tL2NnaS1iaW4vbWFpbG1hbi9saXN0aW5m by9wdmUtZGV2ZWwK