Proxmox 4 : only root can HA?

christophe

Renowned Member
Mar 31, 2011
186
4
83
Hi all,

It seems HA needs root privileges to define groups and resources. Right? Can we hope a role based evolution soon?

And it seems any non root user can't even VIEW groups and HA resources? Can we hope any change soon?

We massively use LDAP authentication and try to avoid root logins as much as possible...
Thank you,​
Christophe.​
 
Yes, in PVE 3;x, but in PVE 4, as soon as you click HA tab :

permission check failed (user != root@pam) 403

Christophe.
 
This issue is addressed here: https://git.proxmox.com/?p=pve-ha-manager.git;a=commit;h=0fcba7ab35dcf459e24e07cceef73b4f65d7f294
No need to open a bug report anymore.

Will be in the repositories soon.

Hi Thomas,

just tried giving my PVE user the proper permissions. Neither role Administrator, nor PVESysAdmin give me the ability to edit the CRM HA
settings. Only root can do it.
Is the commit 0fcba7ab35dcf459e24e07cceef73b4f65d7f294 not yet live?
Running 4.4-1/eb2d6f1e

Thanks a lot for your help.
 
Hi Thomas,

just tried giving my PVE user the proper permissions. Neither role Administrator, nor PVESysAdmin give me the ability to edit the CRM HA
settings. Only root can do it.
Is the commit 0fcba7ab35dcf459e24e07cceef73b4f65d7f294 not yet live?
Running 4.4-1/eb2d6f1e

Thanks a lot for your help.

you need to update, the current version is 4.4-13
 
  • Like
Reactions: jgubo
you need to update, the current version is 4.4-13

Thanks Fabian,

is the latest 4.4-13 only available for subscription users?
We are planning on purchasing a subscription anyways for our nodes.
 
Thanks Fabian,

is the latest 4.4-13 only available for subscription users?
We are planning on purchasing a subscription anyways for our nodes.

no. the subscription repository gets packages with a slight delay to allow for more testing. pve-manager 4.4-13 is in pve-no-subscription.
 
Strange thing, I don't get the update to version 4.4-13

Here's my console output (did an apt-get update before, sources.list is up2date):

root@cl1-pve01:~# dpkg -l | grep pve-manager
ii pve-manager 4.4-1 amd64 The Proxmox Virtual Environment
root@cl1-pve01:~#
root@cl1-pve01:~# apt-get dist-upgrade
Reading package lists... Done
Building dependency tree
Reading state information... Done
Calculating upgrade... Done
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
 
You were right, the pve-non-subscription repo was missing.
We skip that and purchase a subscription next week.

Thanks Fabian for your assistance :)
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!