Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lmZUj-0005cp-Pv for pgsql-admin@arkaria.postgresql.org; Fri, 28 May 2021 10:13:33 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1lmZUh-0006tl-B5 for pgsql-admin@arkaria.postgresql.org; Fri, 28 May 2021 10:13:31 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lmZUh-0006td-2F for pgsql-admin@lists.postgresql.org; Fri, 28 May 2021 10:13:31 +0000 Received: from jakobs.com ([85.214.83.89] helo=rs.plausibolo.de) by magus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lmZUd-0005d8-92 for pgsql-admin@lists.postgresql.org; Fri, 28 May 2021 10:13:30 +0000 Received: from localhost (localhost [127.0.0.1]) by rs.plausibolo.de (Postfix) with ESMTP id 7AF66380449; Fri, 28 May 2021 12:13:24 +0200 (CEST) Received: from rs.plausibolo.de ([127.0.0.1]) by localhost (h2367442.stratoserver.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j5QPMC6NpWPu; Fri, 28 May 2021 12:13:24 +0200 (CEST) Received: from tuxedo.local.de (p5b248469.dip0.t-ipconnect.de [91.36.132.105]) by rs.plausibolo.de (Postfix) with ESMTPSA id 38D44380405; Fri, 28 May 2021 12:13:24 +0200 (CEST) Subject: Re: LDAP autos in postgres To: pgsql-admin@lists.postgresql.org References: From: Holger Jakobs Message-ID: <0c17f285-13c5-9202-1cba-df0ed58135c2@jakobs.com> Date: Fri, 28 May 2021 12:13:23 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.10.2 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="jWTcMZGgmWRjaXwWA3EumtKcBnG2AH1pO" List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --jWTcMZGgmWRjaXwWA3EumtKcBnG2AH1pO Content-Type: multipart/mixed; boundary="EtpV9mvK82ZRHawWE6Qb5vuiCp5awaxae"; protected-headers="v1" From: Holger Jakobs To: pgsql-admin@lists.postgresql.org Message-ID: <0c17f285-13c5-9202-1cba-df0ed58135c2@jakobs.com> Subject: Re: LDAP autos in postgres References: In-Reply-To: --EtpV9mvK82ZRHawWE6Qb5vuiCp5awaxae Content-Type: multipart/alternative; boundary="------------EBA1AA936B26177FE724024B" Content-Language: de-DE This is a multi-part message in MIME format. --------------EBA1AA936B26177FE724024B Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Am 28.05.21 um 11:20 schrieb Yambu: > Hello > > Im new to LDAP authentication. > > May i please know where i setup user rights when im using LDAP=20 > authentication? Is it in postgres or LDAP? > > regards All users have to be set up in PostgreSQL=C2=A0 including all attributes = (CREATEROLE ...) and privileges (GRANT ...) LDAP only does the authentication of the users. If user names within=20 PostgreSQL and LDAP don't match, you'll have to set up pg_ident.conf Hope this helps. --=20 Holger Jakobs, Bergisch Gladbach, Tel. +49-178-9759012 --------------EBA1AA936B26177FE724024B Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable
Am 28.05.21 um 11:20 schrieb Yambu:
Hello

Im new to LDAP authentication.<= /div>

May i please know where i setup= user rights when im using LDAP authentication? Is it in postgres or LDAP?

regards

All users have to be set up in PostgreSQL=C2=A0 including all attributes (CREATEROLE ...) and privileges (GRANT ...)

LDAP only does the authentication of the users. If user names within PostgreSQL and LDAP don't match, you'll have to set up pg_ident.conf

Hope this helps.


--=20
Holger Jakobs, Bergisch Gladbach, Tel. +49-178-9759012
--------------EBA1AA936B26177FE724024B-- --EtpV9mvK82ZRHawWE6Qb5vuiCp5awaxae-- --jWTcMZGgmWRjaXwWA3EumtKcBnG2AH1pO Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature" -----BEGIN PGP SIGNATURE----- wmMEABEIACMWIQScuJCxWJK1p5BOebGKV5yTsxlhugUCYLDCQwUDAAAAAAAKCRCKV5yTsxlhupfZ AKDTWFgFx4L9RIrFL+TiL9dn7thCbgCg2KHdsRDYu6Cub+SNvoM2XX2CS7o= =ebDR -----END PGP SIGNATURE----- --jWTcMZGgmWRjaXwWA3EumtKcBnG2AH1pO--