From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <pve-devel-bounces@lists.proxmox.com> Received: from firstgate.proxmox.com (firstgate.proxmox.com [IPv6:2a01:7e0:0:424::9]) by lore.proxmox.com (Postfix) with ESMTPS id 6DD871FF15C for <inbox@lore.proxmox.com>; Wed, 5 Mar 2025 17:10:58 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id B00871AF3C; Wed, 5 Mar 2025 17:10:52 +0100 (CET) Message-ID: <b8fba9f6-6c83-4846-923f-2f7b93856bcf@proxmox.com> Date: Wed, 5 Mar 2025 17:10:17 +0100 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Content-Language: en-US From: =?UTF-8?Q?Lauren=C8=9Biu_Leahu-Vl=C4=83ducu?= <l.leahu-vladucu@proxmox.com> To: pve-devel@lists.proxmox.com X-SPAM-LEVEL: Spam detection results: 0 AWL 0.121 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment RCVD_IN_VALIDITY_CERTIFIED_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_RPBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_SAFE_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [rfc-editor.org, proxmox.com] Subject: [pve-devel] Strategy for Active Directory and OpenID Connect groups and usernames with spaces and other special characters X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion <pve-devel.lists.proxmox.com> List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pve-devel>, <mailto:pve-devel-request@lists.proxmox.com?subject=unsubscribe> List-Archive: <http://lists.proxmox.com/pipermail/pve-devel/> List-Post: <mailto:pve-devel@lists.proxmox.com> List-Help: <mailto:pve-devel-request@lists.proxmox.com?subject=help> List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel>, <mailto:pve-devel-request@lists.proxmox.com?subject=subscribe> Reply-To: Proxmox VE development discussion <pve-devel@lists.proxmox.com> Content-Transfer-Encoding: base64 Content-Type: text/plain; charset="utf-8"; Format="flowed" Errors-To: pve-devel-bounces@lists.proxmox.com Sender: "pve-devel" <pve-devel-bounces@lists.proxmox.com> SGVsbG8gZXZlcnlvbmUsCgpJIHdvdWxkIG5lZWQgc29tZSBmZWVkYmFjayBvbiBhIGZlYXR1cmUg dGhhdCB3YXMgcmVxdWVzdGVkIG11bHRpcGxlIAp0aW1lcyBieSBkaWZmZXJlbnQgdXNlcnMgb3Zl ciB0aGUgeWVhcnMuIFNwZWNpZmljYWxseSwgbWFueSBwZW9wbGUgaGF2ZSAKY29tcGxhaW5lZCB0 aGF0IHN5bmNocm9uaXppbmcgQWN0aXZlIERpcmVjdG9yeSBncm91cHMgdG8gUFZFIApwYXJ0aWFs bHkvbW9zdGx5IGZhaWxzIGR1ZSB0byBtYW55IGdyb3VwcyBjb250YWluaW5nIHNwYWNlcyBieSBk ZWZhdWx0OiAKaHR0cHM6Ly9idWd6aWxsYS5wcm94bW94LmNvbS9zaG93X2J1Zy5jZ2k/aWQ9Mjky OQoKVW5mb3J0dW5hdGVseSwgbW9zdCBncm91cHMgY3JlYXRlZCBieSBXaW5kb3dzIGJ5IGRlZmF1 bHQgY29udGFpbiBzcGFjZXMuIApUaGlzIGVmZmVjdGl2ZWx5IG1lYW5zIHRoYXQgbW9zdCBncm91 cHMgY2Fubm90IGJlIHN5bmNocm9uaXplZCB0byBQVkUgYnkgCmRlZmF1bHQgd2l0aG91dCBmdXJ0 aGVyIChtYW51YWwpIGNoYW5nZXMuIFdoaWxlIHRoaXMgY2FuIGJlIGZpeGVkIGJ5IApyZW1vdmlu ZyB0aGUgc3BhY2VzIG1hbnVhbGx5LCB0aGlzIGlzIG11Y2ggaGFyZGVyIHRvIGRvIGlmIHRoZSBB RCBkb21haW4gCmFscmVhZHkgZXhpc3RzIGFuZCBpcyB1c2VkIHNpbmNlIGEgbG9uZ2VyIHRpbWUu CgpGdXJ0aGVybW9yZSwgb3VyIGRvY3VtZW50YXRpb24gc3RhdGVzIHRoYXQgc3BhY2VzIHNob3Vs ZCBiZSBhbGxvd2VkIGFzIApsb25nIGFzIHRoZXkgYXJlIG5vdCBhdCB0aGUgYmVnaW5uaW5nIG9y IGVuZDogCmh0dHBzOi8vcHZlLnByb3htb3guY29tL3B2ZS1kb2NzL2NoYXB0ZXItcHZldW0uaHRt bCNwdmV1bV9sZGFwX3Jlc2VydmVkX2NoYXJhY3RlcnMKCkF0IHRoaXMgcG9pbnQgSSB3b3VsZCBh bHNvIGxpa2UgdG8gY2l0ZSBzb21lIExEQVAgc3BlY2lmaWNhdGlvbnMgb24gdGhpcyAKbWF0dGVy OgotIFJGQyAyMjUzIChvYnNvbGV0ZSk6IGh0dHBzOi8vd3d3LnJmYy1lZGl0b3Iub3JnL3JmYy9y ZmMyMjUzI3NlY3Rpb24tMi40Ci0gUkZDIDQ1MTQgKG5ld2VyLCBvYnNvbGV0ZXMgUkZDIDIyNTMp OiAKaHR0cHM6Ly93d3cucmZjLWVkaXRvci5vcmcvcmZjL3JmYzQ1MTQjc2VjdGlvbi0yLjQKCk5v dCBsb25nIGFnbywgc29tZW9uZSBoYXMgc2VudCBhIHBhdGNoIHNlcmllcyB0cnlpbmcgdG8gZml4 IGEgc2ltaWxhciAKaXNzdWUgd2l0aCBPcGVuSUQgQ29ubmVjdDogCmh0dHBzOi8vbG9yZS5wcm94 bW94LmNvbS9wdmUtZGV2ZWwvMjZmMGM4ZjItNTdmMC00MDY0LWE4N2QtMGRlOWY2NWUzMTZmQHBy b3htb3guY29tL1QvI20yM2JmYmVmZGZkNjZkN2RkZTgwYjNmZTRlNDAzM2E2YjZkOGNlM2RlCgpJ IGV4cGVyaW1lbnRlZCBhcm91bmQgd2l0aCB0aGUgYmVzdCBzdHJhdGVneSBmb3IgZ29pbmcgZm9y d2FyZC4gSWRlYWxseSwgCm91ciBzdHJhdGVneSBzaG91bGQgYXBwbHkgZm9yIGJvdGggQWN0aXZl IERpcmVjdG9yeSBhbmQgT3BlbklEIENvbm5lY3QgCnRvIGVuc3VyZSBjb25zaXN0ZW5jeS4gQWxz bywgd2hpbGUgdGhlIEFjdGl2ZSBEaXJlY3RvcnkgaXNzdWUgaXMgbW9yZSAKYWJvdXQgdGhlIGdy b3VwcywgdGhpcyBlcXVhbGx5IGFwcGxpZXMgdG8gdXNlcm5hbWVzIChidXQgaXMgbGVzcyAKdGlt ZS1jcml0aWNhbCBkdWUgdG8gdXNlcm5hbWVzIG5vdCBjb250YWluaW5nIHNwYWNlcyBieSBkZWZh dWx0KS4KCkkgd291bGQgbGlrZSB0byBhc2sgZm9yIHlvdXIgZmVlZGJhY2sgb24gd2hhdCdzIHRo ZSBiZXN0IHN0cmF0ZWd5IGZvciAKZ29pbmcgZm9yd2FyZCwgYWxzbyByZWdhcmRpbmcgYmFja3dh cmRzIGNvbXBhdGliaWxpdHkgYW5kIGZ1dHVyZSBtYWpvciAKdmVyc2lvbnMuCgpRdWVzdGlvbnM6 CgoxLiBEbyB3ZSB3YW50IHRvIGFsbG93IHNwYWNlcyBpbiBncm91cHMgYW5kL29yIHVzZXJuYW1l cywgb3Igc2hvdWxkIHdlIApwcmVmZXIgcmVwbGFjZW1lbnQgY2hhcmFjdGVycyAoZS5nLiBtYXBw aW5nIHNwYWNlKHMpIHRvIF8gb3Igc29tZSBvdGhlciAKY2hhcmFjdGVyKT8KCk15IHRha2Ugb24g dGhpczogd2UgaGF2ZSB0byBkaWZmZXJlbnRpYXRlIGJldHdlZW4gZ3JvdXBzIGFuZCB1c2VybmFt ZXMgLSAKdGhpcyBpcyBiZWNhdXNlIHVzZXJuYW1lcyBhcmUgYWxzbyB1c2VkIHRvIGxvZyBpbiwg d2hpbGUgZ3JvdXBzIGFyZSBub3QuCgpJbiBvdGhlciB3b3JkcywgaGF2aW5nIGEgcmVwbGFjZW1l bnQgY2hhcmFjdGVyIChlLmcuIHNwYWNlIHRvIF8gKSBmb3IgCmdyb3VwcyBtZWFucyB0aGF0IHRo ZSBncm91cCBuYW1lIHdvdWxkIGJlIHNsaWdodGx5IGRpZmZlcmVudCBjb21wYXJlZCB0byAKdGhl IG9yaWdpbmFsLCBidXQgd291bGQgb3RoZXJ3aXNlIHdvcmsuIEhvd2V2ZXIsIGRvaW5nIHRoZSBz YW1lIGZvciAKdXNlcm5hbWVzIHdvdWxkIG1lYW4gdGhhdCB3ZSB3b3VsZCBhbHdheXMgbmVlZCB0 byBkbyB0aGUgc2FtZSAKcmVwbGFjZW1lbnRzIGF0IGxvZ2luIGluIG9yZGVyIHRvIGFsbG93IGxv Z2dpbmcgaW4gYm90aCB3aXRoIHRoZSAKb3JpZ2luYWwgbmFtZSBhbmQgd2l0aCB0aGUgcmVwbGFj ZWQgbmFtZS4KCkFub3RoZXIgaXNzdWUgd2l0aCBkb2luZyByZXBsYWNlbWVudHMgaXMgdGhlIHBv c3NpYmlsaXR5IG9mIGhhdmluZyAKY29sbGlzaW9ucyAtIGUuZy4gaGF2aW5nIGJvdGggIkRvbWFp biBBZG1pbnMiIGFuZCAiRG9tYWluX0FkbWlucyIgaW4gdGhlIApBY3RpdmUgRGlyZWN0b3J5LiBP ZiBjb3Vyc2UsIHdlIHNob3VsZCBjaGVjayBmb3Igc3VjaCBjYXNlcyBhbmQgcHJldmVudCAKUFZF IGZyb20gc3luY2hyb25pemluZyBzdWNoIGdyb3Vwcy4KCkkgd2FzIHdvbmRlcmluZyB3aGV0aGVy IGFsbG93aW5nIHNwYWNlcyB3b3VsZCBtZWFuIGRyYW1hdGljIGNoYW5nZXMgdG8gCm91ciBjb2Rl LCBidXQgbWFuYWdlZCB0byBtYWtlIGl0IHdvcmsgYnkgYWRhcHRpbmcgdGhlIFJlZ2V4IGluIGEg ZmV3IApwbGFjZXMgLSBzbyBJIGhhdmUgYSAobW9zdGx5KSB3b3JraW5nIHZlcnNpb24gYWxyZWFk eS4gSG93ZXZlciwgSSBhbSAKYWxzbyBhd2FyZSB0aGF0IHRoaXMgY2hhbmdlIGV2ZW50dWFsbHkg aGFzIGEgaGlnaGVyIHBvdGVudGlhbCBvZiAKYnJlYWtpbmcgZXhpc3RpbmcgY29kZSB0aGF0IGFz c3VtZXMgbm90IGhhdmluZyBhbnkgc3BhY2VzLiBPbiB0aGUgb3RoZXIgCmhhbmQsIHRoaXMgaXMg YWxzbyB0aGUgcmVhc29uIHdoeSB3ZSBoYXZlIGRpc2N1c3Npb25zIGFuZCBjb2RlIHJldmlld3Mg OykKCgoyLiBJbiBjYXNlIHdlIHdhbnQgdG8gYWxsb3cgc3BhY2VzIGluIGdyb3VwcyBhbmQvb3Ig dXNlcm5hbWVzLCB3ZSBhbHNvIApoYXZlIHRvIGFzayBvdXJzZWx2ZXMgd2hldGhlciB3ZSB3YW50 IHRvIGFsbG93IG90aGVyIHNwZWNpYWwgY2hhcmFjdGVycyAKYXMgd2VsbC4gSXQgaXMgbm90IG5l Y2Vzc2FyaWx5IHVudXN1YWwgZm9yIGEgZ3JvdXAgb3IgdXNlciB0byBoYXZlIApub24tQVNDSUkg Y2hhcmFjdGVycyBpbiBzb21lIHBhcnRzIG9mIHRoZSB3b3JsZC4gQ3VycmVudGx5IHdlIGFyZSBx dWl0ZSAKcmVzdHJpY3RpdmUgd2l0aCBncm91cCBuYW1lcywgYnV0IGFsbG93IG1vc3QgdXNlcm5h bWVzLiBOb3RlOiBhdCB0aGlzIApwb2ludCB3ZSBhbHNvIGhhdmUgc2xpZ2h0IGluY29uc2lzdGVu Y2llcyBpbiBvdXIgUmVnZXggY2hlY2tzIGJldHdlZW4gClBlcmwgYW5kIFJ1c3QuCgoKMy4gSWYg d2UgYWxzbyB3YW50IHRvIGFsbG93IHVzaW5nIHNwZWNpYWwgY2hhcmFjdGVycywgd2UgaGF2ZSB0 byB0aGluayAKYWJvdXQgdGhlIGVuY29kaW5nIHdlIHVzZSBmb3IgdXNlci5jZmcuIEN1cnJlbnRs eSwgd2UncmUgbm90IGRvaW5nIGFueSAKY29udmVyc2lvbnMsIG1lYW5pbmcgdGhhdCBQZXJsIGNv dWxkIHdyaXRlIHRoZSBzdHJpbmdzIHRvIHVzZXIuY2ZnIGFzIAp0aGV5IGFyZSAoZS5nLiBhcyBV VEYtOCksIGJ1dCB3b3VsZCByZWFkIHRoZW0gd2l0aG91dCBhbnkgY29udmVyc2lvbnMsIAp0cmVh dGluZyB0aGUgdGV4dCBhcyBMYXRpbi0xLgoKSSBoYXZlIGFscmVhZHkgc3RhcnRlZCBhIGRpc2N1 c3Npb24gb24gVVRGLTggaW4gb3VyIGNvbmZpZyBmaWxlcywgc28gZm9yIAptb3JlIGRldGFpbHMg b24gaG93IFBlcmwgaGFuZGxlcyBlbmNvZGluZ3MsIGxvb2sgaGVyZTogCmh0dHBzOi8vbG9yZS5w cm94bW94LmNvbS9wdmUtZGV2ZWwvMDgyZDNmZTAtOWM2Yy00OTRkLTllYzMtZjY0NjQ1Y2Q3YTUz QHByb3htb3guY29tL1QvI3QKCgo0LiBXZSBhbHNvIGhhdmUgdG8gdGhpbmsgYWJvdXQgaG93IHdl IHdhbnQgdG8gaGFuZGxlIHVwZ3JhZGVzIGFmdGVyIHN1Y2ggCmEgY2hhbmdlLCBlc3BlY2lhbGx5 IHJlZ2FyZGluZyBjbHVzdGVycy4gSSdtIHNwZWNpZmljYWxseSB0YWxraW5nIGFib3V0IAp0aGUg c2hvcnQgcGVyaW9kIG9mIHRpbWUgd2hlbiB1cGdyYWRpbmcgYSBjbHVzdGVyIHRvIGEgbmV3IHZl cnNpb24sIAp3aGVyZSBub3QgYWxsIG5vZGVzIGFyZSBvbiB0aGUgc2FtZSB2ZXJzaW9uIGF0IHRo ZSBzYW1lIHRpbWUgKGUuZy4gZm9yIGEgCmZldyBtaW51dGVzKS4gQSBwb3NzaWJpbGl0eSB3b3Vs ZCBiZSB0byBhbHJlYWR5IGltcGxlbWVudCB0aGUgY2hhbmdlcyBhcyAKcGFydCBvZiBQVkUgOC40 LCBtZWFuaW5nIHRoYXQgdGhlIGNvZGUgY291bGQgaGFuZGxlIGl0IGJ1dCB3ZSB3b3VsZCAKZGlz YWJsZSBpdCBieSBkZWZhdWx0LCB3aGlsZSBtYWtpbmcgaXQgYXZhaWxhYmxlIGJlZ2lubmluZyB3 aXRoIFBWRSA5LjAuCgoKVGhhbmsgeW91IGluIGFkdmFuY2UgZm9yIHlvdXIgaW5wdXQhCgoKTGF1 cmVuyJtpdQoKCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f CnB2ZS1kZXZlbCBtYWlsaW5nIGxpc3QKcHZlLWRldmVsQGxpc3RzLnByb3htb3guY29tCmh0dHBz Oi8vbGlzdHMucHJveG1veC5jb20vY2dpLWJpbi9tYWlsbWFuL2xpc3RpbmZvL3B2ZS1kZXZlbAo=