docs: user-management: document pam and pbs authentication realm

Mostly taken from pve-docs and adapted as needed.

Signed-off-by: Christoph Heiss <c.heiss@proxmox.com>
Reviewed-by: Lukas Wagner <l.wagner@proxmox.com>
Tested-by: Lukas Wagner <l.wagner@proxmox.com>
This commit is contained in:
Christoph Heiss 2025-03-21 14:45:41 +01:00 committed by Thomas Lamprecht
parent 960149b51e
commit d977da6411
3 changed files with 37 additions and 2 deletions

View File

@ -16,8 +16,8 @@ User Configuration
choose the realm when you add a new user. Possible realms are:
:pam: Linux PAM standard authentication. Use this if you want to
authenticate as a Linux system user (users need to exist on the
system).
authenticate as a Linux system user. The users needs to already exist on
the host system.
:pbs: Proxmox Backup Server realm. This type stores hashed passwords in
``/etc/proxmox-backup/shadow.json``.
@ -599,6 +599,32 @@ list view in the web UI, or using the command line:
Authentication Realms
---------------------
.. _user_realms_pam:
Linux PAM
~~~~~~~~~
Linux PAM is a framework for system-wide user authentication. These users are
created on the host system with commands such as ``adduser``.
If PAM users exist on the host system, corresponding entries can be added to
Proxmox Backup Server, to allow these users to log in via their system username
and password.
.. _user_realms_pbs:
Proxmox Backup authentication server
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This is a Unix-like password store, which stores hashed passwords in
``/etc/proxmox-backup/shadow.json``. Passwords are hashed using the SHA-256
hashing algorithm.
This is the most convenient realm for small-scale (or even mid-scale)
installations, where users do not need access to anything outside of Proxmox
Backup Server. In this case, users are fully managed by Proxmox Backup Server
and are able to change their own passwords via the GUI.
.. _user_realms_ldap:
LDAP

View File

@ -479,6 +479,14 @@ const proxmoxOnlineHelpInfo = {
"link": "/docs/user-management.html#user-tfa-lockout",
"title": "Limits and Lockout of Two-Factor Authentication"
},
"user-realms-pam": {
"link": "/docs/user-management.html#user-realms-pam",
"title": "Linux PAM"
},
"user-realms-pbs": {
"link": "/docs/user-management.html#user-realms-pbs",
"title": "Proxmox Backup authentication server"
},
"user-realms-ldap": {
"link": "/docs/user-management.html#user-realms-ldap",
"title": "LDAP"

View File

@ -458,6 +458,7 @@ Ext.define('PBS.Utils', {
pbs: {
name: 'Proxmox Backup authentication server',
ipanel: 'pmxAuthSimplePanel',
onlineHelp: 'user-realms-pbs',
add: false,
edit: true,
pwchange: true,