From: Holger Jakobs <holger@jakobs.com>
To: pgsql-admin@lists.postgresql.org
Subject: Re: LDP over Postgres
Date: Thu, 1 Dec 2022 22:18:14 +0100
Message-ID: <09104dd8-006b-73cc-adb1-50314185aa50@jakobs.com> (raw)
In-Reply-To: <CAORSJyhPaDC+huX_svTw4VxJPGTdKf_0X0F8Xoxqucm7Le-Zyw@mail.gmail.com>
References: <CAORSJyhPaDC+huX_svTw4VxJPGTdKf_0X0F8Xoxqucm7Le-Zyw@mail.gmail.com>
Am 01.12.22 um 21:43 schrieb jagjit singh:
> Hi Experts,
>
> Does anyone have documentation to implement LDAP over Postgresql 14.
>
> I have a requirement in my project.
>
> Thanks in advance
>
Someone else wrote on this mailing list:
PostgreSQL supports GSSAPI / Kerberos, which is a much better approach
in Active Directory and other environments where Kerberos is deployed.
Using LDAP exposes the user's password to the database server and
therefore isn't secure and should be strongly discouraged.
You can certainly have applications authenticate to PostgreSQL using
Kerberos too with very little overhead (unlike PG's LDAP authentication
option, which makes a synchronous call out to the LDAP server on each
and every login).
(from the PostgreSQL mailing list, 2022-01-21)
--
Holger Jakobs, Bergisch Gladbach, Tel. +49-178-9759012
Attachments:
[application/pgp-signature] OpenPGP_signature (202B, ../09104dd8-006b-73cc-adb1-50314185aa50@jakobs.com/2-OpenPGP_signature)
download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: holger@jakobs.com, pgsql-admin@lists.postgresql.org
Subject: Re: LDP over Postgres
In-Reply-To: <09104dd8-006b-73cc-adb1-50314185aa50@jakobs.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox