From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <t.lamprecht@proxmox.com>
Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68])
 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
 key-exchange X25519 server-signature RSA-PSS (2048 bits))
 (No client certificate requested)
 by lists.proxmox.com (Postfix) with ESMTPS id 739816908B
 for <pve-user@lists.proxmox.com>; Thu, 11 Feb 2021 12:58:41 +0100 (CET)
Received: from firstgate.proxmox.com (localhost [127.0.0.1])
 by firstgate.proxmox.com (Proxmox) with ESMTP id 696891B874
 for <pve-user@lists.proxmox.com>; Thu, 11 Feb 2021 12:58:41 +0100 (CET)
Received: from proxmox-new.maurer-it.com (proxmox-new.maurer-it.com
 [212.186.127.180])
 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
 key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
 (No client certificate requested)
 by firstgate.proxmox.com (Proxmox) with ESMTPS id 07B641B866
 for <pve-user@lists.proxmox.com>; Thu, 11 Feb 2021 12:58:41 +0100 (CET)
Received: from proxmox-new.maurer-it.com (localhost.localdomain [127.0.0.1])
 by proxmox-new.maurer-it.com (Proxmox) with ESMTP id C8B724415E;
 Thu, 11 Feb 2021 12:58:40 +0100 (CET)
Message-ID: <e05701fa-4141-61a2-3845-0a7bf0a7c0bb@proxmox.com>
Date: Thu, 11 Feb 2021 12:58:40 +0100
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:86.0) Gecko/20100101
 Thunderbird/86.0
Content-Language: en-US
To: Proxmox VE user list <pve-user@lists.proxmox.com>,
 Maximilian Hill <mhill@inett.de>
References: <YCUErLTBBRaK9gKo@inett.de>
From: Thomas Lamprecht <t.lamprecht@proxmox.com>
In-Reply-To: <YCUErLTBBRaK9gKo@inett.de>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-SPAM-LEVEL: Spam detection results:  0
 AWL -0.002 Adjusted score from AWL reputation of From: address
 KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment
 NICE_REPLY_A           -0.119 Looks like a legit reply (A)
 RCVD_IN_DNSWL_MED        -2.3 Sender listed at https://www.dnswl.org/,
 medium trust
 SPF_HELO_NONE           0.001 SPF: HELO does not publish an SPF Record
 SPF_PASS               -0.001 SPF: sender matches SPF record
Subject: Re: [PVE-User] Shell without realm 'pam'
X-BeenThere: pve-user@lists.proxmox.com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Proxmox VE user list <pve-user.lists.proxmox.com>
List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pve-user>, 
 <mailto:pve-user-request@lists.proxmox.com?subject=unsubscribe>
List-Archive: <http://lists.proxmox.com/pipermail/pve-user/>
List-Post: <mailto:pve-user@lists.proxmox.com>
List-Help: <mailto:pve-user-request@lists.proxmox.com?subject=help>
List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-user>, 
 <mailto:pve-user-request@lists.proxmox.com?subject=subscribe>
X-List-Received-Date: Thu, 11 Feb 2021 11:58:41 -0000

Hi,

On 11.02.21 11:19, Maximilian Hill wrote:
> Hello,
> 
> is it, somehow, possible, to allow users in a specific group to use the
> shell without signing in in realm 'pam'?

Currently not.

> Specifically, we need to use it with an AD realm.

To be clear, with what credentials would the login in the PVE shell?

Is the LDAP also exposed in the system and valid for login or do they
have credentials of an existing PAM user?

cheers,
Thomas