dualfroz 1fd55b23fc fix #5371: user management: document the PAM service of the PAM realm
Since pve-access-control commit 01f191c ("fix #1670: change PAM service
name to project specific name"), the PAM realm authenticates with the
PAM service name 'proxmox-ve-auth'. This allows changing the PAM
configuration for logins to Proxmox VE only, for example to not allow
logins of users with an empty password, which the default 'nullok'
option of pam_unix in common-auth does. But this is only mentioned in
the commit message.

Document the service name, the fallback to the 'other' service if no
such configuration exists, and that this configuration is local to each
node, like the system users.

Signed-off-by: Michal Fox <me@dualfroz.com>
2026-10-02 17:00:58 +02:00
S
Description
My contributions to proxmox-git/pve-docs: 13 commits
241 KiB
0 Stars 1 Watchers 0 Forks
Languages
AsciiDoc 100%