pbs_realm_ldap_create
Create an LDAP authentication realm for Proxmox Backup Server. Requires base DN and user attribute. Dry-run by default; set confirm=True to execute.
Instructions
MUTATION (MEDIUM): create an LDAP authentication realm. Dry-run by default. base_dn and
user_attr are REQUIRED (unlike AD, which needs neither on create).
PASSWORD REDACTION: password is UNCONDITIONALLY redacted identically to
pbs_realm_ad_create's. confirm=True executes and returns a dict; synchronous, no UPID. Needs
PROXIMO_PBS_* config.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| mode | No | LDAP connection type: 'ldap', 'ldap+starttls', or 'ldaps'. | |
| port | No | LDAP server port. | |
| realm | Yes | New LDAP realm name. | |
| capath | No | Path to a CA certificate file or directory to trust for TLS. | |
| filter | No | Custom LDAP search filter for user sync. | |
| verify | No | Whether to verify the LDAP server's TLS certificate. | |
| base_dn | Yes | LDAP base DN to search under (required for LDAP, unlike AD). | |
| bind_dn | No | LDAP bind DN for the service account. | |
| comment | No | Optional free-text comment. | |
| confirm | No | False (default) returns a dry-run PLAN preview; True executes the mutation. | |
| default | No | True to make this the default realm preselected on login. | |
| server1 | Yes | Primary LDAP server address. | |
| server2 | No | Fallback LDAP server address. | |
| password | No | LDAP bind password for the service account; redacted from all plans/logs/ledger. | |
| user_attr | Yes | Username attribute used to map a userid to an LDAP dn (required for LDAP). | |
| user_classes | No | Comma-separated allowed objectClass values for user sync. | |
| proximo_target | No | Which configured Proxmox target to run this call against — a target name from your multi-target config (a specific PVE/PBS/PMG/PDM box). Omit to use the single/default target from the environment; the selection applies only to this call. | |
| sync_attributes | No | Comma-separated key=value LDAP-attribute-to-PBS-field sync map, forwarded verbatim. | |
| sync_defaults_options | No | Default sync-run options string, forwarded verbatim (exact syntax not live-verified). |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |