From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from gate001.proxmox.com (gate001.proxmox.com [45.144.208.40]) by lore.proxmox.com (Postfix) with ESMTPS id 478251FF0A8 for ; Thu, 20 Aug 2026 23:11:00 +0200 (CEST) Received: from gate001.proxmox.com (localhost.localdomain [127.0.0.1]) by gate001.proxmox.com (Proxmox) with ESMTP id 0172C215D6; Thu, 20 Aug 2026 23:10:34 +0200 (CEST) From: Marco Gaiarin Subject: PVE and AD domain join... Date: Thu, 20 Aug 2026 15:02:16 +0200 Organization: Il gaio usa sempre TIN per le liste, fallo anche tu!!! Message-ID: X-Trace: eraldo.lilliput.linux.it 1787258329 506779 192.168.1.45 (20 Aug 2026 20:38:49 GMT) X-Mailer: tin/2.6.4-20240224 ("Banff") (Linux/7.0.0-29-generic (x86_64)) X-Gateway-System: SmartGate 1.4.5 To: pve-user@lists.proxmox.com X-SPAM-LEVEL: Spam detection results: 1 AWL -0.149 Adjusted score from AWL reputation of From: address DATE_IN_PAST_06_12 1.103 Date: is 6 to 12 hours before Received: date DMARC_PASS -0.1 DMARC pass policy JMQ_SPF_NEUTRAL 0.5 SPF set to ?all KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment (newer systems) SPF_HELO_PASS -0.001 SPF: HELO matches SPF record SPF_PASS -0.001 SPF: sender matches SPF record Message-ID-Hash: KX2KD6HITHBZ3BVTAH42XUN4KQUEZ3BF X-Message-ID-Hash: KX2KD6HITHBZ3BVTAH42XUN4KQUEZ3BF X-MailFrom: gaio@lilliput.linux.it X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.10 Precedence: list List-Id: Proxmox VE user list List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: I'm still seeking feedback... if i was not clear, please say me. Thanks. [ This is a repost of the following article: ] [ From: Marco Gaiarin ] [ Subject: PVE and AD domain join... ] [ Newsgroups: lists.pve.user ] [ Message-ID: ] I've read a bit PVE9 changelogs, impressive! We have some sets of asymmetric clusters, composed by two 'new' servers that do horsepower, and a third, tipically old, server that do mostly quorum and disk space for backup. For better manage some aspects of our backup we are thinking to join that third node via SSSD/Winbind to our AD domain, adding samba shares of some stuff. I've read wikis and forums, and seems to me that this is not explicitly promoted nor forbidden: still PVE9 use AD accounts directly, and forums are full of people that have joined one node (or the cluster) via SSSD/Winbind. I'm asking explicitly if i could get some trouble doing this; for example: 1) if i join only one server in a cluster, i can get trouble; 2) the pretty high UID/GID generated by SSSD/Winbind for users and groups can be problematic for LXC, because could clash. Having some experience on Debian and PVE, seems to me that there will no trouble at all. But i prefere to ask. Thanks. -- --