Differences

This shows you the differences between two versions of the page.

--- it:proxmox [2026/02/18 21:37] – eric.pylko
+++ it:proxmox [2026/02/18 22:09] (current) – eric.pylko
@@ Line 3: / Line 3: @@
 This will have all the information needed to setup a new Proxmox server and integrate it with our environment.
-To authenticate against the RMS AD servers, the following needs to be /etc/pve/domains.cfg
+To authenticate against the RMS AD servers, the following needs to be in {{:it:domains.cfg|/etc/pve/domains.cfg}}
-''pve: pve\\
+You will have to set the password for the join user (not in scope for this document)
-      comment Proxmox VE authentication server''
-''pam: pam\\
+You will also need to run these commands on each node in the cluster:
-      comment Linux PAM standard authentication''
-''ldap: space.rocmakers.org\\
+pveum acl modify / –group Linux_Admins-space.rocmakers.org –role Administrator\\
-      comment Rochester Makerspace AD\\
+pveum acl modify / –group Linux_Users-space.rocmakers.org –role PVEAuditor
-      base_dn OU=Accounts,DC=space,DC=rocmakers,DC=org\\
-      server1 ad1.space.rocmakers.org''
-''       server2 ad2.space.rocmakers.org\\
-      user_attr sAMAccountName\\
-      bind_dn CN=Proxmox Joiner,OU=Services,OU=Accounts,DC=space,DC=rocmakers,DC=org\\
-      default 1\\
-      filter (|(memberOf:1.2.840.113556.1.4.1941:=CN=Linux_Users,OU=Groups,DC=space,DC=rocmakers,DC=org)(memberOf:1.2.840.113556.1.4.1941:=CN=Linux_Admins,OU=Groups,DC=space,DC=rocmakers,DC=org))\\
-      group_dn OU=Groups,DC=space,DC=rocmakers,DC=org\\
-      group_filter (|(cn=Linux_Users)(cn=Linux_Admins))\\
-      mode ldap+starttls\\
-      sync-defaults-options remove-vanished=acl;entry;properties,scope=both\\
-      sync_attributes email=mail,firstname=givenname,lastname=sn\\
-      user_classes Person''
-'' ''