From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <pve-devel-bounces@lists.proxmox.com> Received: from firstgate.proxmox.com (firstgate.proxmox.com [IPv6:2a01:7e0:0:424::9]) by lore.proxmox.com (Postfix) with ESMTPS id B3D6F1FF16B for <inbox@lore.proxmox.com>; Thu, 6 Mar 2025 10:09:25 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id E9E56362A6; Thu, 6 Mar 2025 10:09:18 +0100 (CET) Mime-Version: 1.0 Date: Thu, 06 Mar 2025 10:09:15 +0100 Message-Id: <D892DH4MU71L.2SGZLN64CZ70@proxmox.com> Cc: "pve-devel" <pve-devel-bounces@lists.proxmox.com> From: "Shannon Sterz" <s.sterz@proxmox.com> To: "Proxmox VE development discussion" <pve-devel@lists.proxmox.com> X-Mailer: aerc 0.20.1-0-g2ecb8770224a-dirty References: <b8fba9f6-6c83-4846-923f-2f7b93856bcf@proxmox.com> In-Reply-To: <b8fba9f6-6c83-4846-923f-2f7b93856bcf@proxmox.com> X-SPAM-LEVEL: Spam detection results: 0 AWL -0.014 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment RCVD_IN_VALIDITY_CERTIFIED_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_RPBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_SAFE_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Subject: Re: [pve-devel] Strategy for Active Directory and OpenID Connect groups and usernames with spaces and other special characters X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion <pve-devel.lists.proxmox.com> List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pve-devel>, <mailto:pve-devel-request@lists.proxmox.com?subject=unsubscribe> List-Archive: <http://lists.proxmox.com/pipermail/pve-devel/> List-Post: <mailto:pve-devel@lists.proxmox.com> List-Help: <mailto:pve-devel-request@lists.proxmox.com?subject=help> List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel>, <mailto:pve-devel-request@lists.proxmox.com?subject=subscribe> Reply-To: Proxmox VE development discussion <pve-devel@lists.proxmox.com> Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: pve-devel-bounces@lists.proxmox.com Sender: "pve-devel" <pve-devel-bounces@lists.proxmox.com> T24gV2VkIE1hciA1LCAyMDI1IGF0IDU6MTAgUE0gQ0VULCBMYXVyZW7Im2l1IExlYWh1LVZsxINk dWN1IHdyb3RlOgo+IEhlbGxvIGV2ZXJ5b25lLAo+Cj4gSSB3b3VsZCBuZWVkIHNvbWUgZmVlZGJh Y2sgb24gYSBmZWF0dXJlIHRoYXQgd2FzIHJlcXVlc3RlZCBtdWx0aXBsZQo+IHRpbWVzIGJ5IGRp ZmZlcmVudCB1c2VycyBvdmVyIHRoZSB5ZWFycy4gU3BlY2lmaWNhbGx5LCBtYW55IHBlb3BsZSBo YXZlCj4gY29tcGxhaW5lZCB0aGF0IHN5bmNocm9uaXppbmcgQWN0aXZlIERpcmVjdG9yeSBncm91 cHMgdG8gUFZFCj4gcGFydGlhbGx5L21vc3RseSBmYWlscyBkdWUgdG8gbWFueSBncm91cHMgY29u dGFpbmluZyBzcGFjZXMgYnkgZGVmYXVsdDoKPiBodHRwczovL2J1Z3ppbGxhLnByb3htb3guY29t L3Nob3dfYnVnLmNnaT9pZD0yOTI5CgotLT44IHNuaXAgODwtLQoKPiBRdWVzdGlvbnM6Cj4KPiAx LiBEbyB3ZSB3YW50IHRvIGFsbG93IHNwYWNlcyBpbiBncm91cHMgYW5kL29yIHVzZXJuYW1lcywg b3Igc2hvdWxkIHdlCj4gcHJlZmVyIHJlcGxhY2VtZW50IGNoYXJhY3RlcnMgKGUuZy4gbWFwcGlu ZyBzcGFjZShzKSB0byBfIG9yIHNvbWUgb3RoZXIKPiBjaGFyYWN0ZXIpPwo+Cj4gTXkgdGFrZSBv biB0aGlzOiB3ZSBoYXZlIHRvIGRpZmZlcmVudGlhdGUgYmV0d2VlbiBncm91cHMgYW5kIHVzZXJu YW1lcyAtCj4gdGhpcyBpcyBiZWNhdXNlIHVzZXJuYW1lcyBhcmUgYWxzbyB1c2VkIHRvIGxvZyBp biwgd2hpbGUgZ3JvdXBzIGFyZSBub3QuCj4KPiBJbiBvdGhlciB3b3JkcywgaGF2aW5nIGEgcmVw bGFjZW1lbnQgY2hhcmFjdGVyIChlLmcuIHNwYWNlIHRvIF8gKSBmb3IKPiBncm91cHMgbWVhbnMg dGhhdCB0aGUgZ3JvdXAgbmFtZSB3b3VsZCBiZSBzbGlnaHRseSBkaWZmZXJlbnQgY29tcGFyZWQg dG8KPiB0aGUgb3JpZ2luYWwsIGJ1dCB3b3VsZCBvdGhlcndpc2Ugd29yay4gSG93ZXZlciwgZG9p bmcgdGhlIHNhbWUgZm9yCj4gdXNlcm5hbWVzIHdvdWxkIG1lYW4gdGhhdCB3ZSB3b3VsZCBhbHdh eXMgbmVlZCB0byBkbyB0aGUgc2FtZQo+IHJlcGxhY2VtZW50cyBhdCBsb2dpbiBpbiBvcmRlciB0 byBhbGxvdyBsb2dnaW5nIGluIGJvdGggd2l0aCB0aGUKPiBvcmlnaW5hbCBuYW1lIGFuZCB3aXRo IHRoZSByZXBsYWNlZCBuYW1lLgo+Cj4gQW5vdGhlciBpc3N1ZSB3aXRoIGRvaW5nIHJlcGxhY2Vt ZW50cyBpcyB0aGUgcG9zc2liaWxpdHkgb2YgaGF2aW5nCj4gY29sbGlzaW9ucyAtIGUuZy4gaGF2 aW5nIGJvdGggIkRvbWFpbiBBZG1pbnMiIGFuZCAiRG9tYWluX0FkbWlucyIgaW4gdGhlCj4gQWN0 aXZlIERpcmVjdG9yeS4gT2YgY291cnNlLCB3ZSBzaG91bGQgY2hlY2sgZm9yIHN1Y2ggY2FzZXMg YW5kIHByZXZlbnQKPiBQVkUgZnJvbSBzeW5jaHJvbml6aW5nIHN1Y2ggZ3JvdXBzLgo+Cj4gSSB3 YXMgd29uZGVyaW5nIHdoZXRoZXIgYWxsb3dpbmcgc3BhY2VzIHdvdWxkIG1lYW4gZHJhbWF0aWMg Y2hhbmdlcyB0bwo+IG91ciBjb2RlLCBidXQgbWFuYWdlZCB0byBtYWtlIGl0IHdvcmsgYnkgYWRh cHRpbmcgdGhlIFJlZ2V4IGluIGEgZmV3Cj4gcGxhY2VzIC0gc28gSSBoYXZlIGEgKG1vc3RseSkg d29ya2luZyB2ZXJzaW9uIGFscmVhZHkuIEhvd2V2ZXIsIEkgYW0KPiBhbHNvIGF3YXJlIHRoYXQg dGhpcyBjaGFuZ2UgZXZlbnR1YWxseSBoYXMgYSBoaWdoZXIgcG90ZW50aWFsIG9mCj4gYnJlYWtp bmcgZXhpc3RpbmcgY29kZSB0aGF0IGFzc3VtZXMgbm90IGhhdmluZyBhbnkgc3BhY2VzLiBPbiB0 aGUgb3RoZXIKPiBoYW5kLCB0aGlzIGlzIGFsc28gdGhlIHJlYXNvbiB3aHkgd2UgaGF2ZSBkaXNj dXNzaW9ucyBhbmQgY29kZSByZXZpZXdzIDspCgpub3Qgc3VyZSBqdXN0IGFsbG93aW5nIHRoZW0g b3IgcmVwbGFjaW5nIHRoZW0gaXMgdGhlIHdheSB0byBnby4gaW1vLCB3ZQpzaG91bGQgZXNjYXBl IGNlcnRhaW4gY2hhcmFjdGVycz8gcGVyY2VudCBlbmNvZGluZyBhcyBzdWdnZXN0ZWQgYnkKZGll dG1hciBmb3IgdGhlIGNvbmZpZyBhbHJlYWR5IHdvdWxkIGJlIG9uZSB3YXkgdG8gZ28uIHdlIGNv dWxkIGFsc28Kc2ltcGx5IGZvbGxvdyB0aGUgcmZjIGhlcmUgYW5kIHVzZSAiXCIgdG8gZXNjYXBl IHRoZSBmb2xsb3dpbmcKY2hhcmFjdGVyIHNldCB1bmNvbmRpdGlvbmFsbHkgKHRoaXMgaXMgYWxs b3dlZCBwZXIgdGhlIHJmYyBbMV0pOgoKJyAnLCAnIicsICcjJywgJysnLCAnLCcsICc7JywgJzwn LCAnPScsICc+Jywgb3IgJ1wnCihVKzAwMjAsIFUrMDAyMiwgVSswMDIzLCBVKzAwMkIsIFUrMDAy QywgVSswMDNCLApVKzAwM0MsIFUrMDAzRCwgVSswMDNFLCBVKzAwNUMsIHJlc3BlY3RpdmVseSkK ClsxXTogaHR0cHM6Ly93d3cucmZjLWVkaXRvci5vcmcvcmZjL3JmYzQ1MTQjc2VjdGlvbi0yLjQK Cgp0aGF0IHNwZWNpZmljIHJmYyB0cmlnZ2VyZWQgc29tZSBtZW1vcmllcyBidHcuIChkb24ndCBt aW5kIHRoZSBpbmNvcnJlY3QKZmlyc3QgbmFtZSA7KSApOgoKaHR0cHM6Ly9sb3JlLnByb3htb3gu Y29tL3B2ZS1kZXZlbC8yMDIzMDUxNzEzMzkzMS4xNDg2MzQtMS1zLnN0ZXJ6QHByb3htb3guY29t LwoKPiAyLiBJbiBjYXNlIHdlIHdhbnQgdG8gYWxsb3cgc3BhY2VzIGluIGdyb3VwcyBhbmQvb3Ig dXNlcm5hbWVzLCB3ZSBhbHNvCj4gaGF2ZSB0byBhc2sgb3Vyc2VsdmVzIHdoZXRoZXIgd2Ugd2Fu dCB0byBhbGxvdyBvdGhlciBzcGVjaWFsIGNoYXJhY3RlcnMKPiBhcyB3ZWxsLiBJdCBpcyBub3Qg bmVjZXNzYXJpbHkgdW51c3VhbCBmb3IgYSBncm91cCBvciB1c2VyIHRvIGhhdmUKPiBub24tQVND SUkgY2hhcmFjdGVycyBpbiBzb21lIHBhcnRzIG9mIHRoZSB3b3JsZC4gQ3VycmVudGx5IHdlIGFy ZSBxdWl0ZQo+IHJlc3RyaWN0aXZlIHdpdGggZ3JvdXAgbmFtZXMsIGJ1dCBhbGxvdyBtb3N0IHVz ZXJuYW1lcy4gTm90ZTogYXQgdGhpcwo+IHBvaW50IHdlIGFsc28gaGF2ZSBzbGlnaHQgaW5jb25z aXN0ZW5jaWVzIGluIG91ciBSZWdleCBjaGVja3MgYmV0d2Vlbgo+IFBlcmwgYW5kIFJ1c3QuCgp5 ZWFoLCBpJ20gbm90IHN1cmUgaWYgdGhpcyBjb3VsZCBjYXVzZSBwcm9ibGVtcyBpbiB0aGUgbG9u ZyBydW4uIHV0Zi04CmhhcyBhIGxvdCBvZiBjb25mdXNhYmxlcyBbMV0uIGkgdGhpbmsgdGhpcyBj b3VsZCBiZWNvbWUgYSBwcm9ibGVtIHdpdGgKZ3JvdXBzLCBhcyBhdHRhY2tlcnMgY291bGQgY3Jl YXRlIGEgZ3JvdXAgdGhhdCBsb29rcyBqdXN0IGxpa2UgYSBoaWdobHkKcHJpdmlsZWdlZCBvdGhl ciBncm91cCBhbmQgcG9zc2libHkgdHJpY2sgYWRtaW5zIGludG8gZ2l2aW5nIHRoZQoiY29uZnVz aW5nIiBncm91cCBtb3JlIHByaXZpbGVnZXMgdGhhbiBpcyBpbnRlbmRlZC4gYWx0aG91Z2gsIGF0 IHRoYXQKcG9pbnQgdGhleSdkIGhhdmUgc29tZSBjb250cm9sIG92ZXIgdGhlIGNvcnJlc3BvbmRp bmcgYXV0aCByZWFsbSBhbnl3YXksCnNvIG1heWJlIG1heWJlIGknbSBhIGxpdHRsZSBwYXJhbm9p ZCBoZXJlLgoKZGlldG1hciBoYXMgYSBwb2ludCB0aGF0IHRoaXMgaXMga2luZCBvZiBhbiBlbmRs ZXNzIGRlYmF0ZSwgdGhvdWdoLgoKWzFdOiBodHRwczovL3d3dy51bmljb2RlLm9yZy9QdWJsaWMv c2VjdXJpdHkvOC4wLjAvY29uZnVzYWJsZXMudHh0CgotLT44IHNuaXAgODwtLQoKCl9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCnB2ZS1kZXZlbCBtYWlsaW5n IGxpc3QKcHZlLWRldmVsQGxpc3RzLnByb3htb3guY29tCmh0dHBzOi8vbGlzdHMucHJveG1veC5j b20vY2dpLWJpbi9tYWlsbWFuL2xpc3RpbmZvL3B2ZS1kZXZlbAo=