Nested security groups from Active Directory

[pinguin]

Hello,

does Proxmox support nested security groups from Active Directory?

 

[oguz]

hi,

you can use active directory as authentication realm [0] and sync [1] the users/groups from there.

does Proxmox support nested security groups from Active Directory?

but i'm not sure what you're specifically asking for. what do you want to do exactly?

[0]: https://pve.proxmox.com/pve-docs/pve-admin-guide.html#pveum_authentication_realms
[1]: https://pve.proxmox.com/pve-docs/chapter-pveum.html#pveum_ldap_sync

 

[pinguin]

Nested security groups in Active Directory are security groups that contain groups and no direct members (users). For example if you use them anywhere in Proxmox, is that supported by Proxmox?

 

[oguz]

no we do not use the AD-inherited permissions or groups specifically anywhere, but as mentioned you can synchronize the groups from your AD environment to use them for authentication.

what kind of support would you be looking for in terms of features?

 

[pinguin]

It was just a general question. Thank you for your answers.

 

[ph0x]

Since you have to configure the AD through an LDAP query, it's up to you if the correct set of users is returned ot not.