[SOLVED] Proxmox VE LDAP sync groups

[Florius]

Hi,

I will gladly admit that I am a total noob when it comes to LDAP, but I have a FreeIPA server running; I can sync users from FreeIPA to Proxmox VE.
However, users have no rights, and I have to manually add groups and add permissions to that.

Is there a way to sync groups as well, and give them rights?
I was unable to find a tutorial for that.

Thank you in advance!

 

[Florius]

Okay so I got my groups added, I had the wrong baseDN.

But all my users are synced to Proxmox, but I only want the members of the group "proxmox_admins".
So I tried a user filter like `memberOf=cn=proxmox_admins,cn=groups,cn=accounts,dc=example,dc=com`, but it doesn't sync ANY users anymore...

 

[Florius]

Ohmy, okay I got it, I had to use an actual bind user, in stead of anonymous, that way groupfilters work as well.

 

[jonny_mnemonik]

Ohmy, okay I got it, I had to use an actual bind user, in stead of anonymous, that way groupfilters work as well.

Hi. Could you please share your proxmox settings for sync users from ldap. Because I am trying a couple of days already but no success. I am interested in settings on page "Edit: LDAP Server General" and "Edit: LDAP Server Sync Options"

 

[jonny_mnemonik]

Hi. Could you please share your proxmox settings for sync users from ldap. Because I am trying a couple of days already but no success. I am interested in settings on page "Edit: LDAP Server General" and "Edit: LDAP Server Sync Options"

I am using FreeIPA as LDAP server where i have "proxmox" group so I want restrict access to Proxmox only for users in this group.

 

[punjprateek]

Hey Bro can you help me setup Microsoft AD authentication i have become clueless how to set it.

 

[sebastien chanson]

A usefull ressource if using freeipa:
https://forum.proxmox.com/threads/configuring-freeipa-ldap-server-with-proxmox.113500/