Active Directory Sync - user & group filter format?

[Quasar90]

Hello,

i am trying to figure out which format the "User Filter" and "Group Filter" of the Sync Option in the Active Directory integration should be!?

I tried to define as DN notation, the official LDAP notation, also only define the an "objectClass", but nothing will accepted. The following error occures every time:



Either in the official Proxmox Documentation or this Forum are any information about this. It already exist an forum Post for this error, but nobody react to this over months. I want to ask in this forum if any hase working filters set? If so, please share a screenshot of it or discribe what you have done or post how it is make in the "domains.cfg".

Kind regards

 

[dcsapak]

for the format, checkout 'pveum help realm modify' but i think the problem is a different one

can you post the output of 'pveversion -v' ?

 

[Quasar90]

Hello dcsapak,

the output of "pveversion -V" ist:

proxmox-ve: 6.4-1 (running kernel: 5.4.143-1-pve)
pve-manager: 6.4-13 (running version: 6.4-13/9f411e79)
pve-kernel-helper: 6.4-8
pve-kernel-5.4: 6.4-7
pve-kernel-5.3: 6.1-6
pve-kernel-5.4.143-1-pve: 5.4.143-1
pve-kernel-5.4.78-2-pve: 5.4.78-2
pve-kernel-5.4.65-1-pve: 5.4.65-1
pve-kernel-5.3.18-3-pve: 5.3.18-3
pve-kernel-5.3.10-1-pve: 5.3.10-1
ceph-fuse: 12.2.11+dfsg1-2.1+b1
corosync: 3.1.2-pve1
criu: 3.11-3
glusterfs-client: 5.5-3
ifupdown: residual config
ifupdown2: 3.0.0-1+pve4~bpo10
ksm-control-daemon: 1.3-1
libjs-extjs: 6.0.1-10
libknet1: 1.20-pve1
libproxmox-acme-perl: 1.1.0
libproxmox-backup-qemu0: 1.1.0-1
libpve-access-control: 6.4-3
libpve-apiclient-perl: 3.1-3
libpve-common-perl: 6.4-4
libpve-guest-common-perl: 3.1-5
libpve-http-server-perl: 3.2-3
libpve-storage-perl: 6.4-1
libqb0: 1.0.5-1
libspice-server1: 0.14.2-4~pve6+1
lvm2: 2.03.02-pve4
lxc-pve: 4.0.6-2
lxcfs: 4.0.6-pve1
novnc-pve: 1.1.0-1
openvswitch-switch: 2.12.3-1
proxmox-backup-client: 1.1.13-2
proxmox-mini-journalreader: 1.1-1
proxmox-widget-toolkit: 2.6-1
pve-cluster: 6.4-1
pve-container: 3.3-6
pve-docs: 6.4-2
pve-edk2-firmware: 2.20200531-1
pve-firewall: 4.1-4
pve-firmware: 3.3-2
pve-ha-manager: 3.1-1
pve-i18n: 2.3-1
pve-qemu-kvm: 5.2.0-6
pve-xtermjs: 4.7.0-3
qemu-server: 6.4-2
smartmontools: 7.2-pve2
spiceterm: 3.1-1
vncterm: 1.6-2
zfsutils-linux: 0.8.5-pve1

But the good news is, that we have find a solution. You have to fill in both, user filter and group filter, if you fill in something in the field "Groupname attr:" (for instance "sAMAccountName"). Without that you can use only user filters. I think an advice for this in the official documentation or a real world example for the GUI or command line would be greate, because it is not so obvious in the documentation.

Kind regards