Proxmox 4 : only root can HA?

C

christophe

Renowned Member
Mar 31, 2011
201
10
83
Hi all,

It seems HA needs root privileges to define groups and resources. Right? Can we hope a role based evolution soon?

And it seems any non root user can't even VIEW groups and HA resources? Can we hope any change soon?

We massively use LDAP authentication and try to avoid root logins as much as possible...
Thank you,​
Christophe.​
 
Yes, in PVE 3;x, but in PVE 4, as soon as you click HA tab :

permission check failed (user != root@pam) 403

Christophe.
 
t.lamprecht said:
This issue is addressed here: https://git.proxmox.com/?p=pve-ha-manager.git;a=commit;h=0fcba7ab35dcf459e24e07cceef73b4f65d7f294
No need to open a bug report anymore.

Will be in the repositories soon.
Click to expand...

Hi Thomas,

just tried giving my PVE user the proper permissions. Neither role Administrator, nor PVESysAdmin give me the ability to edit the CRM HA
settings. Only root can do it.
Is the commit 0fcba7ab35dcf459e24e07cceef73b4f65d7f294 not yet live?
Running 4.4-1/eb2d6f1e

Thanks a lot for your help.
 
jgubo said:
Hi Thomas,

just tried giving my PVE user the proper permissions. Neither role Administrator, nor PVESysAdmin give me the ability to edit the CRM HA
settings. Only root can do it.
Is the commit 0fcba7ab35dcf459e24e07cceef73b4f65d7f294 not yet live?
Running 4.4-1/eb2d6f1e

Thanks a lot for your help.
Click to expand...

you need to update, the current version is 4.4-13
 
  • Like
Reactions: jgubo
jgubo said:
Thanks Fabian,

is the latest 4.4-13 only available for subscription users?
We are planning on purchasing a subscription anyways for our nodes.
Click to expand...

no. the subscription repository gets packages with a slight delay to allow for more testing. pve-manager 4.4-13 is in pve-no-subscription.
 
Strange thing, I don't get the update to version 4.4-13

Here's my console output (did an apt-get update before, sources.list is up2date):

root@cl1-pve01:~# dpkg -l | grep pve-manager
ii pve-manager 4.4-1 amd64 The Proxmox Virtual Environment
root@cl1-pve01:~#
root@cl1-pve01:~# apt-get dist-upgrade
Reading package lists... Done
Building dependency tree
Reading state information... Done
Calculating upgrade... Done
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
 
You were right, the pve-non-subscription repo was missing.
We skip that and purchase a subscription next week.

Thanks Fabian for your assistance :)
 
You must log in or register to reply here.
Top Bottom