proxmox-mirrors/pve-docs
1
0
Fork 0
mirror of https://git.proxmox.com/git/pve-docs synced 2025-05-03 23:17:47 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

ldap sync: minor wording + reference addition

Browse Source 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
This commit is contained in:
Thomas Lamprecht 2020-05-05 10:53:35 +02:00
parent a160926a4d
commit f5eb2299c2
1 changed files with 10 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
pveum.adoc
View File

@ -174,16 +174,20 @@ encryption can be configured.
Syncing LDAP-based realms Syncing LDAP-based realms
~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~
It is possible to sync users and groups for LDAP based realms using It is possible to sync users and groups for LDAP based realms. You can use the
CLI command
----
pveum sync <realm> pveum sync <realm>
or in the `Authentication` panel of the GUI. Users and groups are synced ----
to `/etc/pve/user.cfg`. or in the `Authentication` panel of the GUI. Users and groups are synced to the
cluster-wide user configuration file `/etc/pve/user.cfg`.
Requirements and limitations Requirements and limitations
^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
The `bind_dn` is used to query the users and groups. This account The `bind_dn` is used to query the users and groups. This account needs access
needs access to all desired entries. to all desired entries.
The fields which represent the names of the users and groups can be configured The fields which represent the names of the users and groups can be configured
via the `user_attr` and `group_name_attr` respectively. Only entries which via the `user_attr` and `group_name_attr` respectively. Only entries which
@ -193,6 +197,7 @@ Groups are synced with `-$realm` attached to the name, to avoid naming
conflicts. Please make sure that a sync does not overwrite manually created conflicts. Please make sure that a sync does not overwrite manually created
groups. groups.
[[pveum_ldap_sync_options]]
Options Options
^^^^^^^ ^^^^^^^