Setting up LDAP Authentication for ProxMox VE
#Proxmox #LDAP #Authentication
Full steps can be found at https://i12bretro.github.io/tutorials/0413.html
NOTE: ProxMox does not like spaces in user or group names
--------------------------------------------------------------------
Create VMAdmins Group
--------------------------------------------------------------------
01. Click the Start button ≫ Windows Administrative Tools ≫ Active Directory Users and Computers
02. Expand the domain name
03. Right click on the Users container ≫ New ≫ Group
04. Name the group VMAdmins ≫ Click OK
05. Double click the newly created VMAdmins group
06. Select the Members tab ≫ Click the Add... button
07. Add users who will be administrators for the ProxMox host
--------------------------------------------------------------------
Configuring LDAP Authentication in ProxMox VE
--------------------------------------------------------------------
01. Open a web browser and navigate to the ProxMox VE web UI
02. Log in
03. Select Datacenter in the left navigation menu
04. Select Permissions ≫ Authentication in the left sub navigation menu
05. Click the Add dropdown ≫ LDAP Server
06. Fill out the LDAP Server form as shown below
Realm: i12bretro.local
Base Domain Name: CN=Users,DC=i12bretro,DC=local
Server: 10.10.27.1
User Attribute Name: sAMAccountName
07. Click the Sync Options button at the top
08. Fill out the Sync Options form as shown below
Bind User: CN=readonly_svc,CN=Users,DC=i12bretro,DC=local
Bind Password: Read0nly!!
E-Mail attribute: mail
User classes: person, user
Group classes: group
User Filter: (&(memberOf=CN=VMAdmins,CN=Users,DC=i12bretro,DC=local))
Group Filter: (&(distinguishedName=CN=VMAdmins,CN=Users,DC=i12bretro,DC=local))
Scope: Users and Groups
Enable new users: Yes
Full: Yes
Purge: Yes
09. Click the Add button
10. Back on the Authentication page, select the new ldap authentication and click the Sync button
11. Click the Preview button to test the sync without creating or modifying anything
12. If the users and groups display as expected, close the preview and re-run the sync to create the users and groups
13. Select Permissions in the left sub navigation menu
14. Click Add ≫ Group Permission from the dropdown at the top of the page
15. Set the path to /, select the VMAdmins group from the dropdown and select the desired Role ≫ Click Add
16. Select the user dropdown in the top right of the screen ≫ Logout
17. Log in with one of the LDAP users in the VMAdmins group, making sure to set the Realm to the domain realm created earlier
### Connect with me and others ###
★ Discord: https://discord.com/invite/EzenvmSHW8
★ Reddit: https://reddit.com/r/i12bretro
★ Twitter: https://twitter.com/i12bretro