Windows Active Directory Authentication

[cybessk0011]

Hey everybody. I'm currently trying to add an Windows Active Directory authentication. I am able to successfully authenticate against domain controllers in test environments that I own, but I need to authenticate against a domain controller without being able to access it to change attributes.
Extra Info

• I have an account that I am able to bind with
• I know the domain name
• I know the server name/ip

 

[wolfgang]

Hi,

you must have a user who is able to read the directory.
The rouser is settable at the sync option tab.

 

[t.lamprecht]

That should be enough for adding an auth realm: https://pve.proxmox.com/pve-docs/chapter-pveum.html#pveum_authentication_realms

For syncing you need a readonly users, as Wolfgang said, but for only authenticating (and syncing the respective users manually) you do not need that either.

 

[cybessk0011]

I am just curious, would providing a DNS name that resolves to multiple IP addresses create an issue when authenticating against AD?

 

[t.lamprecht]

As long as those are all are either a mirror of the AD or at least using a compatible schema for the part you use to authenticate: no.