pg.ddx.io pgsql-admin@postgresql.org mailing list archive
help / color / mirror / Atom feedSeed pgAdmin roles with Active Directory groups when using Docker
4+ messages / 3 participants
[nested] [flat]
* Seed pgAdmin roles with Active Directory groups when using Docker
@ 2023-09-25 09:42 mu88 <mu88+dev@posteo.eu>
0 siblings, 2 replies; 4+ messages in thread
From: mu88 @ 2023-09-25 09:42 UTC (permalink / raw)
To: pgsql-admin@lists.postgresql.org
Hi,
I want to setup a pgAdmin instance for our team using the Docker deployment. As our organization uses Active Directory, I'd like to assign the pgAdmin User role to a specific AD group when starting the pgAdmin Docker container.
Within the docs I already found the option to use pgAdmin with LDAP, so hopefully accessing our AD should work.
What I didn't find: is it possible to assign a pgAdmin role to an AD group or only to AD users? And if yes, can this automatically happen on Docker container start (e. g. by using an environment variable or a config file similar to servers.json)?
Or put in other words: is it possible that it looks like this after container start only by configuration without any manual interaction?
Best regards!
PS: you find this question here as well: https://dba.stackexchange.com/questions/331385/seed-pgadmin-roles-with-active-directory-groups-when-...
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: Seed pgAdmin roles with Active Directory groups when using Docker
@ 2023-09-25 10:10 Yogesh Mahajan <yogesh.mahajan@enterprisedb.com>
parent: mu88 <mu88+dev@posteo.eu>
1 sibling, 1 reply; 4+ messages in thread
From: Yogesh Mahajan @ 2023-09-25 10:10 UTC (permalink / raw)
To: mu88 <mu88+dev@posteo.eu>; +Cc: pgsql-admin@lists.postgresql.org, pgAdmin Support <pgadmin-support@postgresql.org>
Hi,
pgAdmin does not have this option as of now. By default , users logged in
with LDAP will have a 'User' role.
You can track development on this feature in the issue - #2483
<https://github.com/pgadmin-org/pgadmin4/issues/2483;
Thanks,
Yogesh Mahajan
EnterpriseDB
On Mon, Sep 25, 2023 at 3:12 PM mu88 <mu88+dev@posteo.eu> wrote:
> Hi,
>
> I want to setup a pgAdmin instance for our team using the Docker
> deployment. As our organization uses Active Directory, I'd like to assign
> the pgAdmin User role to a specific AD group when starting the pgAdmin
> Docker container.
>
> Within the docs I already found the option to use pgAdmin with LDAP, so
> hopefully accessing our AD should work.
>
> What I didn't find: is it possible to assign a pgAdmin role to an AD group
> or only to AD users? And if yes, can this automatically happen on Docker
> container start (e. g. by using an environment variable or a config file
> similar to servers.json)?
>
> Or put in other words: is it possible that it looks like this after
> container start only by configuration without any manual interaction?
>
> Best regards!
>
> PS: you find this question here as well:
> https://dba.stackexchange.com/questions/331385/seed-pgadmin-roles-with-active-directory-groups-when-...
>
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: Seed pgAdmin roles with Active Directory groups when using Docker
@ 2023-09-25 12:11 Yogesh Mahajan <yogesh.mahajan@enterprisedb.com>
parent: Yogesh Mahajan <yogesh.mahajan@enterprisedb.com>
0 siblings, 0 replies; 4+ messages in thread
From: Yogesh Mahajan @ 2023-09-25 12:11 UTC (permalink / raw)
To: mu88 <mu88+dev@posteo.eu>; +Cc: pgAdmin Support <pgadmin-support@postgresql.org>
Hi,
PFA response below -
Thanks,
Yogesh Mahajan
EnterpriseDB
On Mon, Sep 25, 2023 at 4:10 PM mu88 <mu88+dev@posteo.eu> wrote:
> Hi and thank you very much for your quick reply, Yogesh.
>
> Just one follow-up question: you wrote that LDAP users will be assigned to
> the User role by default. If I understand the docs correctly, I can enable
> LDAP by just setting environment variables, so maybe I could solve my use
> case with the current implementation. Only one last piece is missing: can I
> somehow restrict the access to pgAdmin to a certain LDAP group via an
> environment variable?
>
I guess you should be able to specify that in 'LDAP_SEARCH_FILTER':filter
for user search. You can refer this
<https://gist.github.com/jonlabelle/0f8ec20c2474084325a89bc5362008a7#users-in-group;
link for more information.
In this pgAdmin will not have any role in filtering/limiting users to
access.
>
> Thank you!
>
> 25.09.2023 12:11:07 Yogesh Mahajan <yogesh.mahajan@enterprisedb.com>:
>
> Hi,
>
> pgAdmin does not have this option as of now. By default , users logged in
> with LDAP will have a 'User' role.
> You can track development on this feature in the issue - #2483
> <https://github.com/pgadmin-org/pgadmin4/issues/2483;
>
> Thanks,
> Yogesh Mahajan
> EnterpriseDB
>
>
> On Mon, Sep 25, 2023 at 3:12 PM mu88 <mu88+dev@posteo.eu> wrote:
>
>> Hi,
>>
>> I want to setup a pgAdmin instance for our team using the Docker
>> deployment. As our organization uses Active Directory, I'd like to assign
>> the pgAdmin User role to a specific AD group when starting the pgAdmin
>> Docker container.
>>
>> Within the docs I already found the option to use pgAdmin with LDAP, so
>> hopefully accessing our AD should work.
>>
>> What I didn't find: is it possible to assign a pgAdmin role to an AD
>> group or only to AD users? And if yes, can this automatically happen on
>> Docker container start (e. g. by using an environment variable or a config
>> file similar to servers.json)?
>>
>> Or put in other words: is it possible that it looks like this after
>> container start only by configuration without any manual interaction?
>>
>> Best regards!
>>
>> PS: you find this question here as well:
>> https://dba.stackexchange.com/questions/331385/seed-pgadmin-roles-with-active-directory-groups-when-...
>>
>
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: Seed pgAdmin roles with Active Directory groups when using Docker
@ 2023-09-25 14:18 Marcus Vinicius Castro <marcus_castro@yahoo.com.br>
parent: mu88 <mu88+dev@posteo.eu>
1 sibling, 0 replies; 4+ messages in thread
From: Marcus Vinicius Castro @ 2023-09-25 14:18 UTC (permalink / raw)
To: pgsql-admin@lists.postgresql.org <pgsql-admin@lists.postgresql.org>; mu88 <mu88+dev@posteo.eu>
My friend, I didn't use this feature yet. but, I believe that you can write PowerShell script to help with that.
I used PowerShell to set up my containers.
Best regards.
Marcus Henriques
Desenvolvedor – Spassu Tecnologia
Tel: + 55 (21) 98065-7785
Em segunda-feira, 25 de setembro de 2023 às 08:02:32 BRT, mu88 <mu88+dev@posteo.eu> escreveu:
Hi,
I want to setup a pgAdmin instance for our team using the Docker deployment. As our organization uses Active Directory, I'd like to assign the pgAdmin User role to a specific AD group when starting the pgAdmin Docker container.
Within the docs I already found the option to use pgAdmin with LDAP, so hopefully accessing our AD should work.
What I didn't find: is it possible to assign a pgAdmin role to an AD group or only to AD users? And if yes, can this automatically happen on Docker container start (e. g. by using an environment variable or a config file similar to servers.json)?
Or put in other words: is it possible that it looks like this after container start only by configuration without any manual interaction?
Best regards!
PS: you find this question here as well: https://dba.stackexchange.com/questions/331385/seed-pgadmin-roles-with-active-directory-groups-when-...
^ permalink raw reply [nested|flat] 4+ messages in thread
end of thread, other threads:[~2023-09-25 14:18 UTC | newest]
Thread overview: 4+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2023-09-25 09:42 Seed pgAdmin roles with Active Directory groups when using Docker mu88 <mu88+dev@posteo.eu>
2023-09-25 10:10 ` Yogesh Mahajan <yogesh.mahajan@enterprisedb.com>
2023-09-25 12:11 ` Yogesh Mahajan <yogesh.mahajan@enterprisedb.com>
2023-09-25 14:18 ` Marcus Vinicius Castro <marcus_castro@yahoo.com.br>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox