Creating users in the sso/openid realm

[f4242]

Hello,

I'm trying to configure openid SSO. I created the realm and disabled auto creation of users. How I'm supposed to create the users? In PVE, when I create a user, I can select the realm in the form but in PBS this field is missing from the GUI. Also, when trying in CLI, I get an error:

root@pbs:/# proxmox-backup-manager user create test@sso
Error: unknown realm 'sso'

Thank you!

 

[fabian]

proxmox-backup-manager user create test@sso should work - are you sure the realm name is correct?

$ proxmox-backup-manager openid list
┌───────┬────────────┬─────────┐
│ realm  │ issuer-url │ comment │
╞═══════╪════════════╪═════════╡
│ test   │ test       │         │
└───────┴────────────┴─────────┘

$ proxmox-backup-manager user create test@test

 

[f4242]

Hello,

Yes the realm is displayed with the openid list command, but I can't create user.

root@pbs:~# proxmox-backup-manager openid list
┌───────┬─────────────────────┬─────────┐
│ realm │ issuer-url          │ comment │
╞═══════╪═════════════════════╪═════════╡
│ sso   │ https://auth.****** │         │
└───────┴─────────────────────┴─────────┘
root@pbs:~# proxmox-backup-manager user create test@sso
Error: unknown realm 'sso'
root@pbs:~# proxmox-backup-manager versions
proxmox-backup-server 2.3.3-1 running version: 2.3.3

 

[fabian]

same version, works without issues here.. could you post your (censored) /etc/proxmox-backup/domains.cfg ?

 

[f4242]

Hello,

openid: sso
    client-id proxmox-backup-server
    client-key ****
    comment
    issuer-url https://auth.****.**

client-key is 32 random alpha-num characters.

 

[fabian]

well, this is embarassing. I had a local dev build (that has the same version as the last release) installed - this is actually only fixed in git atm: https://git.proxmox.com/?p=proxmox-...ff;h=7c4189522dbf0c9531be0e3ef14faa60658425e2

the fix will be part of the next package release (>= 2.3.4).

 

[f4242]

Good news,thank you!

 

[fabian]

the really good news is it will also bring GUI adding of non-PAM realm users