PVE as FreeIPA client

[cyruspy]

Hello!,

We add all our Linux machines under FreeIPA administration (+AD trust) and would like to include over hosts too to achieve:

- no root password is shared to admins
- named users are always used
- password expiration is handled centrally
- HBAC managed centrally
- sudoers managed centrally

Are there any known drawbacks with this configuration?

 

[Networkstage-Guy]

Hello,
I have a similar use case. I was searching for something and found this forum post.

I am asking switch in the other task, which may be of interest to you.

K

[TUTORIAL] Post in thread 'Configuring FreeIPA LDAP server with Proxmox'

Jul 19, 2025

question, why not use freeipa-client package and normal pam authentication to allow use to proxmox over ldap? I just added user@domain.co for my proxmox system and had no issues what so ever logging in using a fipa account.

• Kendrick