Remote VM Console Errors Out

9

982134098123

Member
Proxmox Subscriber
Feb 1, 2024
27
0
6
Hello,
ive recently updated to v1.1.6 and was excited for the new Console Proxy capabilities. But sadly i cant get them to work.

I tested with a PDM and PVE in the same L2 Network and PDM Version 1.1.6 and PVE Version 9.2.3.

After a bit of research i found, that the root user works with the proxy, but not a Realm User. My User is Administrator in PDM, is there a configuration i can set to get it working?
 
In the PDM Syslog i just get this error:
Jul 7 08:32:24 24-PDM-01 proxmox-datacenter-api[569]: GET /api2/json/pve/remotes/13-PVE-01/qemu/100/vncwebsocket?port=0&vncticket=XXX: 403 Forbidden: [client [::ffff:172.25.201.194]:51620] permission check failed

I suspect a failing permissioncheck in the PDM Backend

The PVE opens the Console, timesout after 10 seconds (i think this is just the default timeout).
 
I have the same issue.

It's not just limited to accessing Console on VM's but also affects accessing the Administrator console for the PDM itself.
1. root@pam always works regardless.
2. user@pam can access PDM console but not a proxmox console
3. user@pdm+ldaprealm cannot access either regardless of permission sets

It feels like a high impact limitation at this stage for using this feature in production. I certainly wouldn't want even admins using the root account for any actual deployment. That's break glass only.
 
You must log in or register to reply here.
Top Bottom
Back