[BUG Found] Changing root@pam PW in Datacenter
- Thread starter Ramalama
- Start date
Hi,
first of all, if you think you found a potentially security-related issue, please report it via the appropriate channels: https://pve.proxmox.com/wiki/Security_Reporting
The PAM realm is per-node, not cluster-wide. The behavior you suggest could be implemented of course, but it would be a breaking change, because some people might already rely on the current behavior. I'd rather document the fact more explicitly, it's just the implicit "As Linux PAM corresponds to host system users" right now: https://pve.proxmox.com/pve-docs/chapter-pveum.html#user-realms-pam
first of all, if you think you found a potentially security-related issue, please report it via the appropriate channels: https://pve.proxmox.com/wiki/Security_Reporting
The PAM realm is per-node, not cluster-wide. The behavior you suggest could be implemented of course, but it would be a breaking change, because some people might already rely on the current behavior. I'd rather document the fact more explicitly, it's just the implicit "As Linux PAM corresponds to host system users" right now: https://pve.proxmox.com/pve-docs/chapter-pveum.html#user-realms-pam
Hi fiona 
You're right, it's just somehow irritating because you are configuring the users/passwords in the Cluster-View, not in the Node-View.
To add an Additional Section in the Node View for PAM Users is not the right way i think either, but then it probably should be done or alternatively PAM-Users should be updated on both nodes if in Cluster-View.
Or at least some Text-Box that mentions this.
Cheers
You're right, it's just somehow irritating because you are configuring the users/passwords in the Cluster-View, not in the Node-View.
To add an Additional Section in the Node View for PAM Users is not the right way i think either, but then it probably should be done or alternatively PAM-Users should be updated on both nodes if in Cluster-View.
Or at least some Text-Box that mentions this.
Cheers
FYI, there are proposed changes to clarify the behavior: https://lore.proxmox.com/pve-devel/.../T/#m58eb19e69620eed630d71903e7f389125b56a46a
