ALT Linux Bugzilla – #57341

Версия пакета: docs-alt-virtualization-pve-11.1-alt1

В разделе, посвящённому областям аутентификации приводятся примеры синхронизации пользователей и групп через терминал:

	# pveum realm sync example.test

При выполнении данной команды, пользователь столкнётся с проблемой:

	400 Parameter verification failed.
	scope: Not passed as parameter and not defined in realm default sync options.
	pveum realm sync <realm> [OPTIONS]

Необходимо дополнительно указывать параметр --scope.

Предлагаю:

	# pveum realm sync example.test --scope both

Согласно man'у:

	pveum realm sync <realm> [OPTIONS]  
	
	Syncs users and/or groups from the configured LDAP to user.cfg. NOTE: Synced groups will have the name name-$realm, so make sure those groups do not exist to prevent overwriting.  
	
	<realm>: <string>  
	Authentication domain ID  
	
	--dry-run <boolean> (default = 0)  
	If set, does not write anything.  
	
	--enable-new <boolean> (default = 1)  
	Enable newly synced users immediately.  
	
	--full <boolean>  
	DEPRECATED: use remove-vanished instead. If set, uses the LDAP Directory as source of truth, deleting users or groups not returned from the sync and removing all locally modified properties of synced users. If not set, only syncs information which is present  
	in the synced data, and does not delete or modify anything else.  
	
	--purge <boolean>  
	DEPRECATED: use remove-vanished instead. Remove ACLs for users or groups which were removed from the config during a sync.  
	
	--remove-vanished ([acl];[properties];[entry])|none (default = none)  
	A semicolon-separated list of things to remove when they or the user vanishes during a sync. The following values are possible: entry removes the user/group when not returned from the sync.  properties removes the set properties on existing user/group that  
	do not appear in the source (even custom ones).  acl removes acls when the user/group is not returned from the sync. Instead of a list it also can be none (the default).  
	
	--scope <both | groups | users>  
	Select what to sync.

Данный пример встречается в разделах:

*  ⁠42.3.3. LDAP аутентификация
*  ⁠42.3.4. AD аутентификация