PBS LDAP Issue

[liberodark]

Hi,

When i try to add LDAP on PBS 3.0 have issue :

Could not search LDAP realm, base_dn could be incorrect: LDAP operation result: rc=4 (sizeLimitExceeded), dn: "", text: "": rc=4 (sizeLimitExceeded), dn: "", text: ""

Configuration on PBS :

Realm : domain.com
Base Domain Search : dc=domain,dc=com
User Attribute Name : sAMAccountName
Bind User : cn=-SA-AD-PBS,ou=PBS,ou=ServiceAccounts,ou=CORPORATE,dc=domain,dc=com
Bind Password : *********
Server : domain.com
Fallback Server : domain-backup.com
Port : 636
Mode : LDAPS

And also have see on sync option is missing some options in PBS :



VS in PVE





But im using all options in PVE.

Have use same LDAP option on PVE 8.0 without issue.

Best Regards

 

[sterzy]

Ah it seems you ran into an issue with the new flow for creating LDAP realms. Sorry this is a bug it seems. The query used to check whether the LDAP connection would work seems to exceed a size limit and fails. The part handling this logic only checks whether the query succeeds, not why it fails. I'll look into this.

 

[sterzy]

Since this fix is taking longer than I expected (sorry for that), you can use this work around for now:

Edit the file /etc/proxmox-backup/domains.cfg like so

ldap: <realm-name>
    base-dn <base-dn>
    bind-dn <bind-dn>
    mode <ldap|ldaps|ldap+starttls>
    server1 <server>
    server2 <fallback>
    user-attr <user-attribute>

If you use a bind-dn you also need to add your bind password unter /etc/proxmox-backup/ldap_passwords.json like so:

{
  "<realm-name>": "<password>"
}

 

[liberodark]

Hello.

Since I already have the configuration on PVE I'll just transfer this to PBS and add ldap_passwords.json.

Best Regards

 

[liberodark]

But have see little issue i can see other realm :


Have try to set other realm but i can't see other realm.

pam: pam
pve: pve

Best Regards

 

[sterzy]

Hey,

first off, the PVE config is not identical to the PBS one, so it may not work as expected. PVE and PBS use different LDAP implementations. Secondly, I am not sure what you are trying to do in your last post, but you don't need to add the PAM or PVE realms to your /etc/proxmox-backup/domains.cfg file.

 

[liberodark]

Im go to wait for your fix i think is better.