Timotej Lazar
3f53c84865
Since OIDC auth doesn’t support groups, get them from AD over LDAP. Add a script to fetch user and groups, and update /etc/pve/user.cfg. The script is only installed on one node (first alphabetically), with a cron job to run it daily. The script is installed for clusters with the sync-ldap context key set to a corresponding OIDC realm. The keys ldap_user and ldap_pass must be present in the password store under cluster/<name>. |
||
---|---|---|
.. | ||
cluster.fw.j2 | ||
frr.conf.j2 | ||
interfaces.j2 | ||
real.intf.j2 | ||
sync-ldap.py.j2 |