From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <pve-devel-bounces@lists.proxmox.com> Received: from firstgate.proxmox.com (firstgate.proxmox.com [IPv6:2a01:7e0:0:424::9]) by lore.proxmox.com (Postfix) with ESMTPS id 39EFA1FF168 for <inbox@lore.proxmox.com>; Tue, 18 Mar 2025 10:35:15 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 5A03F19C9C; Tue, 18 Mar 2025 10:35:02 +0100 (CET) Message-ID: <f5c1f44d-5b66-43ee-8217-463c6ab49193@proxmox.com> Date: Tue, 18 Mar 2025 10:34:27 +0100 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird To: =?UTF-8?Q?Fabian_Gr=C3=BCnbichler?= <f.gruenbichler@proxmox.com>, Proxmox VE development discussion <pve-devel@lists.proxmox.com> References: <20250211054029.1269099-1-thomas@atskinner.net> <20250211054029.1269099-4-thomas@atskinner.net> <f3732723-d617-47a9-a7be-652f0893b6ed@proxmox.com> <542246635.6628.1739444630435@webmail.proxmox.com> <1742213599.xagtk502vp.astroid@yuna.none> Content-Language: en-US From: Mira Limbeck <m.limbeck@proxmox.com> In-Reply-To: <1742213599.xagtk502vp.astroid@yuna.none> X-SPAM-LEVEL: Spam detection results: 0 AWL 0.294 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment RCVD_IN_VALIDITY_CERTIFIED_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_RPBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_SAFE_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [plugin.pm, openid.pm, proxmox.com, accesscontrol.pm] Subject: Re: [pve-devel] [PATCH access-control v3 1/1] fix #4411: openid: add logic for openid groups support X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion <pve-devel.lists.proxmox.com> List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pve-devel>, <mailto:pve-devel-request@lists.proxmox.com?subject=unsubscribe> List-Archive: <http://lists.proxmox.com/pipermail/pve-devel/> List-Post: <mailto:pve-devel@lists.proxmox.com> List-Help: <mailto:pve-devel-request@lists.proxmox.com?subject=help> List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel>, <mailto:pve-devel-request@lists.proxmox.com?subject=subscribe> Reply-To: Proxmox VE development discussion <pve-devel@lists.proxmox.com> Cc: Thomas Skinner <thomas@atskinner.net> Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: pve-devel-bounces@lists.proxmox.com Sender: "pve-devel" <pve-devel-bounces@lists.proxmox.com> T24gMy8xNy8yNSAxMzoxOCwgRmFiaWFuIEdyw7xuYmljaGxlciB3cm90ZToKPiBPbiBGZWJydWFy eSAxMywgMjAyNSAxMjowMyBwbSwgRmFiaWFuIEdyw7xuYmljaGxlciB3cm90ZToKPj4KPj4+IE1p cmEgTGltYmVjayA8bS5saW1iZWNrQHByb3htb3guY29tPiBoYXQgYW0gMTIuMDIuMjAyNSAxNTo1 MSBDRVQgZ2VzY2hyaWViZW46Cj4+Pgo+Pj4gIAo+Pj4gT24gMi8xMS8yNSAwNjo0MCwgVGhvbWFz IFNraW5uZXIgd3JvdGU6Cj4+Pj4gU2lnbmVkLW9mZi1ieTogVGhvbWFzIFNraW5uZXIgPHRob21h c0BhdHNraW5uZXIubmV0Pgo+Pj4+IC0tLQo+Pj4+ICBzcmMvUFZFL0FQSTIvT3BlbklkLnBtICAg fCA3OSArKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrCj4+Pj4gIHNyYy9Q VkUvQWNjZXNzQ29udHJvbC5wbSB8ICAyICstCj4+Pj4gIHNyYy9QVkUvQXV0aC9PcGVuSWQucG0g ICB8IDMzICsrKysrKysrKysrKysrKysrCj4+Pj4gIHNyYy9QVkUvQXV0aC9QbHVnaW4ucG0gICB8 ICAxICsKPj4+PiAgNCBmaWxlcyBjaGFuZ2VkLCAxMTQgaW5zZXJ0aW9ucygrKSwgMSBkZWxldGlv bigtKQo+Pj4+Cj4+Pj4gZGlmZiAtLWdpdCBhL3NyYy9QVkUvQVBJMi9PcGVuSWQucG0gYi9zcmMv UFZFL0FQSTIvT3BlbklkLnBtCj4+Pj4gaW5kZXggNzc0MTBlNi4uODE4MTc1ZSAxMDA2NDQKPj4+ PiAtLS0gYS9zcmMvUFZFL0FQSTIvT3BlbklkLnBtCj4+Pj4gKysrIGIvc3JjL1BWRS9BUEkyL09w ZW5JZC5wbQo+Pj4+IEBAIC0xMyw2ICsxMyw3IEBAIHVzZSBQVkU6OkNsdXN0ZXIgcXcoY2ZzX3Jl YWRfZmlsZSBjZnNfd3JpdGVfZmlsZSk7Cj4+Pj4gIHVzZSBQVkU6OkFjY2Vzc0NvbnRyb2w7Cj4+ Pj4gIHVzZSBQVkU6OkpTT05TY2hlbWEgcXcoZ2V0X3N0YW5kYXJkX29wdGlvbik7Cj4+Pj4gIHVz ZSBQVkU6OkF1dGg6OlBsdWdpbjsKPj4+PiArdXNlIFBWRTo6QXV0aDo6T3BlbklkOwo+Pj4+ICAK Pj4+PiAgdXNlIFBWRTo6UkVTVEhhbmRsZXI7Cj4+Pj4gIAo+Pj4+IEBAIC0yMjAsNiArMjIxLDg0 IEBAIF9fUEFDS0FHRV9fLT5yZWdpc3Rlcl9tZXRob2QgKHsKPj4+PiAgCQkkcnBjZW52LT5jaGVj a191c2VyX2VuYWJsZWQoJHVzZXJuYW1lKTsKPj4+PiAgCSAgICB9Cj4+Pj4gIAo+Pj4+ICsJICAg IGlmIChkZWZpbmVkKG15ICRncm91cHNfY2xhaW0gPSAkY29uZmlnLT57J2dyb3Vwcy1jbGFpbSd9 KSkgewo+Pj4+ICsJCWlmIChkZWZpbmVkKG15ICRncm91cHNfbGlzdCA9ICRpbmZvLT57JGdyb3Vw c19jbGFpbX0pKSB7Cj4+Pj4gKwkJICAgIGlmIChyZWYoJGdyb3Vwc19saXN0KSBlcSAnQVJSQVkn KSB7Cj4+Pj4gKwkJCVBWRTo6QWNjZXNzQ29udHJvbDo6bG9ja191c2VyX2NvbmZpZyhzdWIgewo+ Pj4+ICsJCQkgICAgbXkgJHVzZXJjZmcgPSBjZnNfcmVhZF9maWxlKCJ1c2VyLmNmZyIpOwo+Pj4+ ICsKPj4+PiArCQkJICAgICMgcmVwbGFjZSBhbnkgaW52YWxpZCBjaGFyYWN0ZXJzIHdpdGgKPj4+ PiArCQkJICAgIG15ICRyZXBsYWNlX2NoYXJhY3RlciA9ICRjb25maWctPnsnZ3JvdXBzLXJlcGxh Y2UtY2hhcmFjdGVyJ30gLy8gJ18nOwo+Pj4+ICsJCQkgICAgbXkgJG9pZGNfZ3JvdXBzID0geyBt YXAgeyAKPj4+PiArCQkJCSRfID1+IHMvW14kUFZFOjpBdXRoOjpQbHVnaW46Omdyb3VwbmFtZV9y ZWdleF9jaGFyc10vJHJlcGxhY2VfY2hhcmFjdGVyL2dyID0+IDEKPj4+PiArCQkJICAgIH0gJGdy b3Vwc19saXN0LT5AKiB9Owo+Pj4gbWF5YmUgd2UgY291bGQgbG9nIGFueSBvZiB0aG9zZSByZXBs YWNlbWVudHMgaGVyZT8gZG9pbmcgdGhpcyBzaWxlbnRseQo+Pj4gbWF5IGxlYWQgdG8gY29uZnVz aW9uIHdoZW4gZ3JvdXBzIGRvbid0IG1hdGNoCj4+Cj4+IGEgc2ltaWxhciBpc3N1ZSBpcyBmaWxl ZCBmb3IgTERBUC9BRCBzeW5jIGFzIHdlbGwgLSBhbmQgSSBub3cgd29uZGVyIGJhc2VkIG9uIHRo ZSBkaXNjdXNzaW9uIHRoZXJlIC0gZG8gd2UgcmVhbGx5IHdhbnQgdG8gbWFrZSB0aGlzIGNvbmZp Z3VyYWJsZT8gaG93IGRvIHdlIHdhbnQgdG8gaGFuZGxlIGNvbmZsaWN0cz8gd2hpbGUgaXQncyBh IGJpdCBsZXNzIGNyaXRpY2FsIGZvciB0d28gb3IgbW9yZSBPSURDIGdyb3VwcyB0byBiZSBtYXBw ZWQgdG8gdGhlIHNhbWUgUFZFLXNpZGUgZ3JvdXAgKGNvbXBhcmVkIHRvIHRoZSBzYW1lIGhhcHBl bmluZyB3aXRoIHVzZXJzIDspKSwgaWYgaXQncyBwb3NzaWJsZSB0byBhdm9pZCBpdCB0aGF0IHdv dWxkIHN0aWxsIGJlIGdyZWF0Li4KPj4KPj4gZ3JvdXBzIGN1cnJlbnRseSBhbGxvdyAuLV8gYXMg c3BlY2lhbCBjaGFyYWN0ZXJzLCBzbyB3ZSBjb3VsZCBkZXNpZ25hdGUgb25lIG9mIHRoZW0gYXMg ZXNjYXBlIGNoYXJhY3RlciBhbmQgdGhlbiBoYXZlIGEgdW5pcXVlIG1hcHBpbmcgZm9yIGVhY2gg Y2hhcmFjdGVyIHRoYXQgaXNuJ3QgYWxsb3dlZCBvbiB0aGUgUFZFIHNpZGUgKGluY2x1ZGluZyB0 aGF0IGVzY2FwZSBjaGFyYWN0ZXIgOykpCj4+Cj4+IGUuZy4sIGFuIE9JREMgZ3JvdXAgY2FsbGVk ICJmb28gYmFyIiBjb3VsZCBiZSBlbmNvZGVkIGFzICJmb29fMzJfYmFyIiAod2hlcmUgMzIgaXMg aGV4IGZvciBBU0NJSS0iICIpLiBjb3JyZXNwb25kaW5nbHksIGEgZ3JvdXAgY2FsbGVkICJmb29f YmFyIiB3b3VsZCBuZWVkIHRvIGJlIGVuY29kZWQgYXMgImZvb181Rl9iYXIiLiAodGhlIHNlY29u ZCAnXycgY291bGQgb2YgY291cnNlIGJlIGxlZnQgb2ZmIGlmIGRlc2lyZWQpLgo+Pgo+PiB1bmZv cnR1bmF0ZWx5LCBhZGRpbmcgYW4gZW50aXJlbHkgbmV3IGVzY2FwZSBjaGFyYWN0ZXIgaXMgbm90 IHJlYWxseSBwb3NzaWJsZSB1bmxlc3Mgd2Ugd2FudCB0byB3YWl0IGZvciA5LjAsIGFzIHRoYXQg d291bGQgdGhlbiBicmVhayBwYXJzaW5nIG9mIHVzZXIuY2ZnIGluIGEgbWl4ZWQgY2x1c3RlciB3 aGljaCBjYW4gaGF2ZSByZWFsbHkgZGFuZ2Vyb3VzIHNpZGUtZWZmZWN0cy4uCj4+Cj4+IG9yIHdl IGNvdWxkIGxpdmUgd2l0aCBzdWNoIGEgcG90ZW50aWFsbHkgbG9zc3kgbWFwcGluZywgYnV0IHRo ZW4gSSBhbSBub3Qgc3VyZSB3aGV0aGVyIGEgc2luZ2xlLCBoYXJkLWNvZGVkLCBkb2N1bWVudGVk IHZhbHVlIHdvdWxkbid0IGJlIGJldHRlcj8gdGhlIG1haW4gaXNzdWUgd2l0aCB0aGF0IGlzIGlm IHlvdSBhbGxvdyAodW5wcml2aWxlZ2VkKSBjcmVhdGlvbiBhbmQgam9pbmluZyBvZiBncm91cHMg b24gdGhlIE9JREMgc2lkZSwgYXMgdGhlbiBpZiB0aGVyZSBhbHJlYWR5IGlzIGEgZ3JvdXAgY2Fs bGVkICJTeXN0ZW0gQWRtaW5pc3RyYXRvcnMiIHRoYXQgZ290IG1hcHBlZCB0byAiU3lzdGVtX0Fk bWluc3RyYXRvcnMiIG9uIHRoZSBQVkUgc2lkZSwgYSB1c2VyIGNvdWxkIGNyZWF0ZSBhbmQgam9p biAiU3lzdGVtIUFkbWluaXN0cmF0b3JzIiBvbiB0aGUgT0lEQyBzaWRlIGFuZCBnZXQgbWFwcGVk IHRvIHRoZSBleGlzdGluZywgcHJvYmFibHkgcHJpdmlsZWdlZCAiU3lzdGVtX0FkbWluaXN0cmF0 b3JzIiBncm91cC4uCj4gCj4gdGhpcyBwYXJ0IG5vdyBnb3Qgc3BsaXQgb3V0IGludG8gaXRzIG93 biBkaXNjdXNzaW9uOgo+IAo+IGh0dHBzOi8vbG9yZS5wcm94bW94LmNvbS9wdmUtZGV2ZWwvYjhm YmE5ZjYtNmM4My00ODQ2LTkyM2YtMmY3YjkzODU2YmNmQHByb3htb3guY29tL1QvI3UKPiAKPiB3 aGF0IGRvIHlvdSB0aGluayBhYm91dCB0aGUgZm9sbG93aW5nIHRvIG5vdCBrZWVwIHRoaXMgYmxv Y2tlZCBsb25nZXI6Cj4gCj4gLSByZWJhc2UgdGhpcyBzZXJpZXMKPiAtIGRyb3AgdGhlIG5hbWUg bWFuZ2xpbmcvLi4gcGFydCBmb3Igbm93LCBhbmQgb25seSBhbGxvdyBncm91cHMgdGhhdAo+ICAg d29yayB3aXRoIHRoZSBQVkUgY29uc3RyYWludHMgZm9yIHRoZSB0aW1lIGJlaW5nCj4gCj4gd2Ug Y2FuIGltcGxlbWVudCBpdCB3aGVuIHdlJ3ZlIGRlY2lkZWQgaG93IHRvIGhhbmRsZSB0aGUgbmFt ZQo+IG1hbmdsaW5nL2NvbGxpc2lvbi8uLiBpc3N1ZSwgYW5kIGVuc3VyZSB3ZSBnZXQgYSBjb25z aXN0ZW50Cj4gaW1wbGVtZW50YXRpb24gZm9yIGJvdGggTERBUC9BRCBhbmQgT0lEQy4KPiAKClNv dW5kcyBnb29kIHRvIG1lLiBHcm91cCBzdXBwb3J0IGlzIGEgaHVnZSBpbXByb3ZlbWVudCBldmVu IHdpdGggdGhpcwpsaW1pdGF0aW9uIGZvciBub3cuCgoKX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX18KcHZlLWRldmVsIG1haWxpbmcgbGlzdApwdmUtZGV2ZWxA bGlzdHMucHJveG1veC5jb20KaHR0cHM6Ly9saXN0cy5wcm94bW94LmNvbS9jZ2ktYmluL21haWxt YW4vbGlzdGluZm8vcHZlLWRldmVsCg==