Enable SSH login with LDAP authentication

[joace]

Getting more loves with Proxmox, especially able to run docker inside a lxc container!

I have installed a 4-node cluster running 6.2, and configured LDAP realm for webgui login, everything is working fine, now a new required just came up to get the same LDAP user able to login with ssh, searched forum and google a while, most stuffs I can find are some generic description setup PAM with openLDAP, but not specific to Proxmox, just wondering anyone can help provide some guidance I can refer to? Thanks in advance!

And another question is whether I have to do the same configuration on 4 different nodes, i know Proxmox is using some cluster file system to have the same configuration for all nodes, not sure whether this is not applicable for user configuration outside configuration from webgui.

 

[LnxBil]

I have installed a 4-node cluster running 6.2, and configured LDAP realm for webgui login, everything is working fine, now a new required just came up to get the same LDAP user able to login with ssh, searched forum and google a while, most stuffs I can find are some generic description setup PAM with openLDAP, but not specific to Proxmox, just wondering anyone can help provide some guidance I can refer to? Thanks in advance!

It's the same as for Debian Buster.

Why don't you want to have SSH via LDAP users? They will not be able to use any hypervisor functionally and pipeing everything through sudo is a pain and the completion will not work.

And another question is whether I have to do the same configuration on 4 different nodes, i know Proxmox is using some cluster file system to have the same configuration for all nodes, not sure whether this is not applicable for user configuration outside configuration from webgui.

No, just the directory tree under /etc/pve is synched all over the cluster. If you want something for /home, please use a shared network filesystem like NFS or CIFS.

Why would you want ordinary users on your hypervisor? I cannot see any benefit of this.