From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <pve-devel-bounces@lists.proxmox.com>
Received: from firstgate.proxmox.com (firstgate.proxmox.com [IPv6:2a01:7e0:0:424::9])
	by lore.proxmox.com (Postfix) with ESMTPS id 39EFA1FF168
	for <inbox@lore.proxmox.com>; Tue, 18 Mar 2025 10:35:15 +0100 (CET)
Received: from firstgate.proxmox.com (localhost [127.0.0.1])
	by firstgate.proxmox.com (Proxmox) with ESMTP id 5A03F19C9C;
	Tue, 18 Mar 2025 10:35:02 +0100 (CET)
Message-ID: <f5c1f44d-5b66-43ee-8217-463c6ab49193@proxmox.com>
Date: Tue, 18 Mar 2025 10:34:27 +0100
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
To: =?UTF-8?Q?Fabian_Gr=C3=BCnbichler?= <f.gruenbichler@proxmox.com>,
 Proxmox VE development discussion <pve-devel@lists.proxmox.com>
References: <20250211054029.1269099-1-thomas@atskinner.net>
 <20250211054029.1269099-4-thomas@atskinner.net>
 <f3732723-d617-47a9-a7be-652f0893b6ed@proxmox.com>
 <542246635.6628.1739444630435@webmail.proxmox.com>
 <1742213599.xagtk502vp.astroid@yuna.none>
Content-Language: en-US
From: Mira Limbeck <m.limbeck@proxmox.com>
In-Reply-To: <1742213599.xagtk502vp.astroid@yuna.none>
X-SPAM-LEVEL: Spam detection results:  0
 AWL 0.294 Adjusted score from AWL reputation of From: address
 BAYES_00                 -1.9 Bayes spam probability is 0 to 1%
 DMARC_MISSING             0.1 Missing DMARC policy
 KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment
 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to
 Validity was blocked. See
 https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more
 information.
 RCVD_IN_VALIDITY_RPBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to
 Validity was blocked. See
 https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more
 information.
 RCVD_IN_VALIDITY_SAFE_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to
 Validity was blocked. See
 https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more
 information.
 SPF_HELO_NONE           0.001 SPF: HELO does not publish an SPF Record
 SPF_PASS               -0.001 SPF: sender matches SPF record
 URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See
 http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more
 information. [plugin.pm, openid.pm, proxmox.com, accesscontrol.pm]
Subject: Re: [pve-devel] [PATCH access-control v3 1/1] fix #4411: openid:
 add logic for openid groups support
X-BeenThere: pve-devel@lists.proxmox.com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Proxmox VE development discussion <pve-devel.lists.proxmox.com>
List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pve-devel>, 
 <mailto:pve-devel-request@lists.proxmox.com?subject=unsubscribe>
List-Archive: <http://lists.proxmox.com/pipermail/pve-devel/>
List-Post: <mailto:pve-devel@lists.proxmox.com>
List-Help: <mailto:pve-devel-request@lists.proxmox.com?subject=help>
List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel>, 
 <mailto:pve-devel-request@lists.proxmox.com?subject=subscribe>
Reply-To: Proxmox VE development discussion <pve-devel@lists.proxmox.com>
Cc: Thomas Skinner <thomas@atskinner.net>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Errors-To: pve-devel-bounces@lists.proxmox.com
Sender: "pve-devel" <pve-devel-bounces@lists.proxmox.com>
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