mirror of
https://git.proxmox.com/git/proxmox-backup
synced 2025-04-28 16:35:39 +00:00
docs: user-management: document pam
and pbs
authentication realm
Mostly taken from pve-docs and adapted as needed. Signed-off-by: Christoph Heiss <c.heiss@proxmox.com> Reviewed-by: Lukas Wagner <l.wagner@proxmox.com> Tested-by: Lukas Wagner <l.wagner@proxmox.com>
This commit is contained in:
parent
960149b51e
commit
d977da6411
@ -16,8 +16,8 @@ User Configuration
|
||||
choose the realm when you add a new user. Possible realms are:
|
||||
|
||||
:pam: Linux PAM standard authentication. Use this if you want to
|
||||
authenticate as a Linux system user (users need to exist on the
|
||||
system).
|
||||
authenticate as a Linux system user. The users needs to already exist on
|
||||
the host system.
|
||||
|
||||
:pbs: Proxmox Backup Server realm. This type stores hashed passwords in
|
||||
``/etc/proxmox-backup/shadow.json``.
|
||||
@ -599,6 +599,32 @@ list view in the web UI, or using the command line:
|
||||
Authentication Realms
|
||||
---------------------
|
||||
|
||||
.. _user_realms_pam:
|
||||
|
||||
Linux PAM
|
||||
~~~~~~~~~
|
||||
|
||||
Linux PAM is a framework for system-wide user authentication. These users are
|
||||
created on the host system with commands such as ``adduser``.
|
||||
|
||||
If PAM users exist on the host system, corresponding entries can be added to
|
||||
Proxmox Backup Server, to allow these users to log in via their system username
|
||||
and password.
|
||||
|
||||
.. _user_realms_pbs:
|
||||
|
||||
Proxmox Backup authentication server
|
||||
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
||||
|
||||
This is a Unix-like password store, which stores hashed passwords in
|
||||
``/etc/proxmox-backup/shadow.json``. Passwords are hashed using the SHA-256
|
||||
hashing algorithm.
|
||||
|
||||
This is the most convenient realm for small-scale (or even mid-scale)
|
||||
installations, where users do not need access to anything outside of Proxmox
|
||||
Backup Server. In this case, users are fully managed by Proxmox Backup Server
|
||||
and are able to change their own passwords via the GUI.
|
||||
|
||||
.. _user_realms_ldap:
|
||||
|
||||
LDAP
|
||||
|
@ -479,6 +479,14 @@ const proxmoxOnlineHelpInfo = {
|
||||
"link": "/docs/user-management.html#user-tfa-lockout",
|
||||
"title": "Limits and Lockout of Two-Factor Authentication"
|
||||
},
|
||||
"user-realms-pam": {
|
||||
"link": "/docs/user-management.html#user-realms-pam",
|
||||
"title": "Linux PAM"
|
||||
},
|
||||
"user-realms-pbs": {
|
||||
"link": "/docs/user-management.html#user-realms-pbs",
|
||||
"title": "Proxmox Backup authentication server"
|
||||
},
|
||||
"user-realms-ldap": {
|
||||
"link": "/docs/user-management.html#user-realms-ldap",
|
||||
"title": "LDAP"
|
||||
|
@ -458,6 +458,7 @@ Ext.define('PBS.Utils', {
|
||||
pbs: {
|
||||
name: 'Proxmox Backup authentication server',
|
||||
ipanel: 'pmxAuthSimplePanel',
|
||||
onlineHelp: 'user-realms-pbs',
|
||||
add: false,
|
||||
edit: true,
|
||||
pwchange: true,
|
||||
|
Loading…
Reference in New Issue
Block a user