Adding PBS to PDM

[metcon]

Hi, I have a problem adding PBS to PDM.

1. PBS is running on a Synology NAS in a VM with IP address 192.168.1.14. When I try to add PBS with IP address and port 192.168.1.14:8007 to PDM, it fails. I have split DNS on my LAN and I manage to add PBS to PDM with the subdomain pbs.mydomain.com:443. How come I can´t add PBS with its IP address and port?

2. After adding PBS with the subdomain pbs.mydomain.com to PDM, it doesn´t show any information because of permissions denied. I have added a user pdm@pbs to PBS and gave it the role Admin to the path /. No success. How to manage this?

 

[Lukas Wagner]

Hi!

Regarding 1.), when you SSH into the PDM host, does pbs.mydomain.com actually resolve to the IP you mentioned? You can check via ping pbs.mydomain.com or dig pbs.mydomain.com .

Regarding 2.), PBS uses privilege separation, meaning that the user and any token of this user are distinct entities in the permission system. This means you need to give the token the appropriate privileges, as well as the user. The token's permissions are limited by the user's permissions. To quote from the documentation:

Additionally, privilege separated tokens can never have permissions on any given path that their associated user does not have.

 

[metcon]

Hi, thanks for your response!

1) When I ping pbs.mydomain.com it resolves the IP of my Traefik instance. The LAN IP of PBS is 192.168.1.14 and somehow I can´t ping it. PBS is on my Main LAN and PDM is on my Server LAN with the IP 192.168.30.43 (and a LXC). I have made a firewall rule to allow PDM to access PBS, but somehow I still can´t ping it. As mentioned before, PBS is in a VM on my Synology NAS. Any ideas what it could be?

Edit: how stupid, the firewall rule was after a block rule... This is solved.

2) I wil try to give the user and token the same permissions. Is there a option available to make custom roles in PDM? Or else, what minimum role does PDM require for PBS?