From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by lists.proxmox.com (Postfix) with ESMTPS id DDC5392CB5 for ; Thu, 23 Mar 2023 11:37:39 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 3B94A2A612 for ; Thu, 23 Mar 2023 11:37:09 +0100 (CET) Received: from suzuki.com.pl (suzuki.com.pl [79.96.117.68]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by firstgate.proxmox.com (Proxmox) with ESMTPS for ; Thu, 23 Mar 2023 11:37:03 +0100 (CET) Received: from localhost (127.0.0.1) (HELO v317.home.net.pl) by /usr/run/smtp (/usr/run/postfix/private/idea_relay_lmtp) via UNIX with SMTP (IdeaSmtpServer 5.1.0) id fd2cd3ccbfae2951; Thu, 23 Mar 2023 11:30:23 +0100 Received: from SMP5CG1013R03 (unknown [85.219.240.99]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by v317.home.net.pl (Postfix) with ESMTPSA id 839B5E803FD for ; Thu, 23 Mar 2023 11:30:23 +0100 (CET) From: "Mariusz Suchodolski" To: Date: Thu, 23 Mar 2023 11:30:23 +0100 Organization: Suzuki Motor Poland Message-ID: <00b801d95d72$79ee3710$6dcaa530$@suzuki.com.pl> MIME-Version: 1.0 X-Mailer: Microsoft Outlook 16.0 Thread-Index: AdldciRBaKCFMjZqQzGtIaIbUjyCOQ== Content-Language: pl X-CLIENT-IP: 85.219.240.99 X-CLIENT-HOSTNAME: 85.219.240.99 X-VADE-SPAMSTATE: clean X-VADE-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgedvhedrvdeggedgudeiucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecujffqoffgrffnpdggtffipffknecuuegrihhlohhuthemucduhedtnecunecujfgurhephffvufffohfkgggtofhtsegrtdhgpedvtddvnecuhfhrohhmpedfofgrrhhiuhhsiicuufhutghhohguohhlshhkihdfuceomhgrrhhiuhhsiidrshhutghhohguohhlshhkihesshhuiihukhhirdgtohhmrdhplheqnecuggftrfgrthhtvghrnheptefftdeluedttdfhgfevjeeugfdtkedvjefffeeuhfffhefhleeikeetteeukefgnecukfhppeekhedrvdduledrvdegtddrleelnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepkeehrddvudelrddvgedtrdelledphhgvlhhopefuoffrheevifdutddufefttdefpdhmrghilhhfrhhomhepfdforghrihhushiiucfuuhgthhhougholhhskhhifdcuoehmrghrihhushiirdhsuhgthhhougholhhskhhisehsuhiiuhhkihdrtghomhdrphhlqedpnhgspghrtghpthhtohepuddprhgtphhtthhopehpvhgvqdhushgvrheslhhishhtshdrphhrohigmhhogidrtghomh X-DCC--Metrics: v317.home.net.pl 1024; Body=1 Fuz1=1 Fuz2=1 X-SPAM-LEVEL: Spam detection results: 0 AWL -0.951 Adjusted score from AWL reputation of From: address BAYES_50 0.8 Bayes spam probability is 40 to 60% HTML_MESSAGE 0.001 HTML included in message KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment SPF_HELO_PASS -0.001 SPF: HELO matches SPF record SPF_PASS -0.001 SPF: sender matches SPF record Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.29 Subject: [PVE-User] Host console access with realm different from PAM X-BeenThere: pve-user@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE user list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Mar 2023 10:37:39 -0000 Hello, Is custom realm <-> pam mapping in plans? We've setup Azure AD authentication but attempting to connect to one of the virtualization hosts yields the following message when attempting to access console: Connection failed (Error 403: Permission check failed (realm aad ! = pam) ) MS.