sometimes the qdevice setup can fail when copying CA certificates if the
node SSH keys are not matching for some reason.
reported here:
https://forum.proxmox.com/threads/pvecm-qdevice-setup-fails.88681
Signed-off-by: Oguz Bektas <o.bektas@proxmox.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
With 5 ms (stable!) even mid size cluster can work just fine, and we
know quite some smaller setups that work OK with 6 - 9 ms, so ease
on unnecessarily scaring users into thinking that their network will
cause them trouble.
we got reports of working two node clusters with ~15 ms latency, so
it can work out above 10ms, albeit things start to get really brittle
and def. not something for 3+ nodes.
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
It is not needed anymore to place the keyring/secret file manually in
the correct location as it can be done with pvesm and the GUI/API now.
Signed-off-by: Aaron Lauterer <a.lauterer@proxmox.com>
by explicitly stating that this only applies to the 'custom' certificate
key, not the built-in self-signed one..
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
adjusts the code block style where the older(?) way was used to be
consistent and more easy to distinguish as code block
Signed-off-by: Aaron Lauterer <a.lauterer@proxmox.com>
We switched configuring /etc/apt/auth.conf to use /debian/pve as path
instead of just the old /debian for better compatibility with PVE and
PBS getting co-installed on the same host.
To match that stricter server definition the sources.list for
pve-enterprise must contain the /pve at the end. Otherwise there is
no match and updating via the pve-enterprise repository doesn't work.
Signed-off-by: Mira Limbeck <m.limbeck@proxmox.com>
[ Thomas: adapted commit message and older repos as 6.x too ]
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
Begin "Authentication Realms" section with brief introduction to each
realm (this was there already, but inconsistent in the level of detail
given for each part).
Give each realm type its own subsection
Adds some more information on LDAP and Active Directory configuration.
Restructure the document to bring the "Syncing LDAP-Based Realms" section
closer to the LDAP and AD sections.
Explain LDAP parameters/options individually in list format
Remove some non-relevant information such as how to add system users
Some more minor langauge and formatting fixup
switch back to 'storage' instead of 'target', and add the default inside
the sentence instead of after.
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
"default local storage" is confusing without the backticks. reword the
sentences to make it clearer about `storage` parameter usage.
Signed-off-by: Oguz Bektas <o.bektas@proxmox.com>
this adds a warning in the documentation to remove any replication jobs
before deleting a cluster node
Signed-off-by: Dylan Whyte <d.whyte@proxmox.com>
