Permissions for Remote synchronisation Datastore between 2 server

[Dark26]

Bonjour,

I try to set permissions right for synchronise two data store on two differents servers.

server 1 :
one user (user1@pbs) with permissision DatastoreAdmin on Datastore1

server2 :
one user (user2@pbs) with permissision DatastoreAdmin Datastore2

with root@pam i can had the remote.

I would like to create a token for the auth-id for the synchronisation, and iwould like to configure the synchronisation with (user2@pbs) and not root@pam ( for pulling from server1)

But everytime i have a error 403 .

Is-it possible to add a remote with an account user@pbs and not user@pam?

Is-it possible to use a token for auth-id for connection to te remote ?


What is the persmissions needed for the auth-id for the remote connection?


Thanks.
Thanks

 

[Dark26]

I find what i was looking for :

O

[SOLVED] Thread 'Need some help with remotes and sync jobs'

Jan 17, 2021

Hi there,

I have 1 PVE and 2 PBS instances. PBS-A is installed on the same host as PVE while PBS-B is on its own host (remote).
I am doing backups to PBS-A and keep them only for a short term.
PBS-B is meant to add PBS-A as a remote and then sync backups and keep them long term.

What works:
- PVE backs up to PBS-A
- created an API token on PBS-A
- gave API token RemoteSyncOperator permissions on /datastore/local
- added PBS-A as remote on PBS-B by using "user@pam!token-name" as "Auth ID" and the secret that was generated when creating the API token

Where the first problem...

• Ovidiu
• Replies: 6
• Forum: Proxmox Backup: Installation and configuration

Tanks Fabian.

We need to use admin user to add a remote, so that's why i have a error 403