Proxmox WebGUI - AD User Login / Invalid Username Format

[ekin06]

Hello guys,

I wan't our Active Directory users be able to login to the Proxmox WebGUI. At least there is no Problem for a user like "admin-example". But our AD-Names are like "Arno Nymous". So the problem is, that I can't add a user with spaces in between first- and lastname because Proxmox says "invalid username format". This is a big problem, due to we don't want to/cannot change the AD-loginnames. I tried to add the username with "%20" between names (like in HTML). After that Proxmox accepted the username format, but login won't work - not with "User Name" either "User%20Name". All AD-logins without spaces are working fine.

The problem exists on Proxmox 3.2 as well as on 3.3 (just upgraded).
Is there another trick? Or will it be supported in future?

Has anyone an idea - would really appreciate it!
Kind Regards,
ekin06

 

[tom]

I never used login names with spaces - very uncommon, at least for me.

Pls point me to the official microsoft docs, describing that spaces are allowed for login names.

 

[tom]

I just found http://technet.microsoft.com/en-us/library/bb726984.aspx

Spaces seems possible, but the docs tells us:

"... But it's generally not a good idea to use spaces in account names."

 

[ekin06]

Hi,

I found this: http://technet.microsoft.com/en-us/library/cc776019(v=ws.10).aspx

The names of security principal objects can contain all Unicode characters except the special LDAP characters defined in RFC 2253. This list of special characters includes: a leading space; a trailing space; and any of the following characters: # , + " \ < > ;
Security principal names must conform to the following guidelines:
User Account - A user account cannot consist solely of periods (.) or spaces, or end in a period. Any leading periods or spaces are cropped. Use of the @ symbol is not supported with the logon format for Windows NT 4.0 and earlier, which isDomainName\UserName. Windows 2000 logon names are unique to the domain and Windows Server 2003 logon names are unique within the forest.

But maybe you are right and I will propose to my colleagues to make the step to change the login format. Hope they will agree, because they don't like changes on common practice (we will need some changes on our database frontend etc.) . I just joined the company a year ago and never went into trouble with that loginnames, so i didn't really complain about them, but now... IT'S TIME TO DUELL! ;D

 

[wahmed]

I agree with Tom, login username with spaces are not just common and causes more trouble then worth. I personally think it is microsoft way to keep customers. "You can use multi word username with us".
I am not aware of any linux based os supports username with spaces. I would think a user prefers a smaller username. wahmed instead of Wasim Ahmed is obviously much more convenient. From IT point of view, the more normalized it is the better choices it gives for future upgrade/migrate/transformation to another platform.

 

[ekin06]

Thanks again, we modified all login names and now login via AD into WebUI is working fine. Now we just have to set permissions. Is there a way to customize preset permission roles or can I create own new roles?

Edit: Nvm... "pveum roleadd"