OpenID users cant access Shell

[javito1081]

Hi,

I have PBS setup on the same server as my PVE, i use nginx proxy manager for reverse and authentik for sso, problem is that i cant access shell over web, after checking the logs i get:

May 13 09:01:15 JavitoVE proxmox-backup-api[988]: POST /api2/json/nodes/localhost/termproxy: 400 Bad Request: [client [::ffff:10.0.1.67]:33986] only pam users can use the console

Is there a way to allow users other than the PAM ones to access shell? and i know its a PBS only thing, cause when i access shell on PVE which is setup the same way, i can access shell just fine, it just asks for user and pasword

 

[javito1081]

Anyone? :-(

 

[Johannes S]

This seems to be working as designed:

Sys.Console
Sys.Console allows a user to access the system's console, note that for all but root@pam a valid system login is still required.
https://pbs.proxmox.com/docs/user-management.html#privileges

I would suggest to create a feature request on bugzilla.proxmox.com to get a official answer from the developers

 

[javito1081]

This seems to be working as designed:



I would suggest to create a feature request on bugzilla.proxmox.com to get a official answer from the developers

That is cracy, why would u allow using shell on PVE and not PBS, i just submited the bug, lets see what they respond :-(

 

[Johannes S]

That is cracy, why would u allow using shell on PVE and not PBS, i just submited the bug, lets see what they respond :-(

Any link for reference?

 

[javito1081]

Any link for reference?

Not rly, but i have PVE and PBS setup with Authentik, with PVE i can access shell using my OpenID user, only diference is that i get asked for the user and pass



And on PBS all i get is an Error 400


and when i check the log i get:

May 14 21:52:30 JavitoVE proxmox-backup-api[988]: POST /api2/json/nodes/localhost/termproxy: 400 Bad Request: [client [::ffff:10.0.1.244]:50116] only pam users can use the console

 

[Johannes S]

I should have worded it better I meant a link to your bug ticket so other people can see the discussion on it

 

[javito1081]

I should have worded it better I meant a link to your bug ticket so other people can see the discussion on it

Ahhhh hahahaha, here it is

https://bugzilla.proxmox.com/show_bug.cgi?id=6398

 

[Johannes S]

Thanks, Fabian answer looks promising, so it was a good thing you brought this up

 

[javito1081]

Thanks, Fabian answer looks promising, so it was a good thing you brought this up

Oh yeah, I rly hope they do it