From: Marco Gaiarin <gaio@lilliput.linux.it>
To: pve-user@lists.proxmox.com
Subject: PVE and AD domain join...
Date: Wed, 29 Jul 2026 11:03:50 +0200 [thread overview]
Message-ID: <k8sojm-r701.ln1@leia.lilliput.linux.it> (raw)
I've read a bit PVE9 changelogs, impressive!
We have some sets of asymmetric clusters, composed by two 'new' servers that
do horsepower, and a third, tipically old, server that do mostly quorum and
disk space for backup.
For better manage some aspects of our backup we are thinking to join that
third node via SSSD/Winbind to our AD domain, adding samba shares of some stuff.
I've read wikis and forums, and seems to me that this is not explicitly
promoted nor forbidden: still PVE9 use AD accounts directly, and forums are
full of people that have joined one node (or the cluster) via SSSD/Winbind.
I'm asking explicitly if i could get some trouble doing this; for example:
1) if i join only one server in a cluster, i can get trouble;
2) the pretty high UID/GID generated by SSSD/Winbind for users and groups can be
problematic for LXC, because could clash.
Having some experience on Debian and PVE, seems to me that there will no
trouble at all.
But i prefere to ask. Thanks.
--
reply other threads:[~2026-07-30 6:40 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=k8sojm-r701.ln1@leia.lilliput.linux.it \
--to=gaio@lilliput.linux.it \
--cc=pve-user@lists.proxmox.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox