ldap integration - +(comment, email, first name, lastname)

[gustav]

hello and good afternoon,

i have added the line

sync_attributes comment=departmentNumber,email=email,firstname=givenName,lastname=sn

to /etc/pve/domains.cfg.

the result is fine as long as i sync by hand (sync button @ permissions -> realms) - i can see the correct content of the configured attributes. when the automatic 'realm syn job' runs, the content of my configured attributes is lost (the fields are empty), at least it is no longer displayed. when i resync by hand, the correct content is displayed.

is there anything i can do in order to make the content of the fields permanent?

thanks in advance for your advice.

gystav

 

[cheiss]

Hi,

could you please provide the output of pveversion -v and cat /etc/pve/domains.cfg?
You might need to censor some things of the last command.

I'll see if I can reproduce it, I'd just like to make sure of your package versions.

Edit: For the record, I can reproduce it. It does not happen when running the realm sync job manually, *only* when it is really run by itself in the background.

 

[gustav]

..

Edit: For the record, I can reproduce it. It does not happen when running the realm sync job manually, *only* when it is really run by itself in the background.

thanks for your fast reply.

is there anything i can do do get it fixed?

rgds, gustav

 

[cheiss]

is there anything i can do do get it fixed?

I'll dive into it and try to get a fix out as soon as possible, but it might take some time anyway until it is packaged & hits our repositories.

But you are free to create an entry in our bugtracker, if you want to keep track / get notified if and when that happens.

 

[cheiss]

@gustav: Just to follow up on this and let you know: I just sent a patch to fix this: https://lists.proxmox.com/pipermail/pve-devel/2024-March/062252.html

Thanks again for reporting this!

 

[gustav]

just to let you know: when configuring notification targets i have to enter email-addresses (additional recipients) - it does not work if i enter uid@ldap because the corresponding email-address is unknown after an automatic sync run.