pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  
help / color / mirror / Atom feed
From: Bruce Momjian <bruce@momjian.us>
To: Evan Rempel <erempel@uvic.ca>
Cc: pgsql-admin@postgresql.org <pgsql-admin@postgresql.org>
Subject: Re: LDAP authentication
Date: Tue, 14 Oct 2008 22:12:36 -0400 (EDT)
Message-ID: <200810150212.m9F2CaP29689@momjian.us> (raw)
In-Reply-To: <48EFD63C.30507@uvic.ca>

Evan Rempel wrote:
> Well, the list became very quiet on this question. Can anyone chime in with
> suggestions to have some accounts authenticated by ldap and the remainder by MD5

Create a group/role and list that in pg_hba.conf for each authentication
method.

---------------------------------------------------------------------------

> 
> Evan.
> 
> Evan Rempel wrote:
> > I would like to use password authentication for most users, but LDAP authentication for the remaining ones users,
> > There will be no overlap of login names.
> > 
> > I do not really want to create an entry in the pg_hba.conf file for each login. What I would like is
> > something like
> > 
> > 
> > host    all     all             142.104.0.0/24        MD5
> > host    all     all             142.104.0.0/24        ldap...
> > 
> > in hopes that if the account can be authenticated by MD5 local postgresql accounts, then it is,
> > otherwise it will be authenticated by ldap.
> > 
> > Is this type of setup possible?
> 
> -- 
> Evan Rempel
> 
> -- 
> Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
> To make changes to your subscription:
> http://www.postgresql.org/mailpref/pgsql-admin

-- 
  Bruce Momjian  <bruce@momjian.us>        http://momjian.us
  EnterpriseDB                             http://enterprisedb.com

  + If your life is a hard drive, Christ can be your backup. +



view thread (7+ messages)  latest in thread

Message-ID: <200810150212.m9F2CaP29689@momjian.us>
Permalink:  ../200810150212.m9F2CaP29689@momjian.us/
Also on:    postgresql.org/message-id/200810150212.m9F2CaP29689@momjian.us

 · 

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-admin@postgresql.org
  Cc: bruce@momjian.us, erempel@uvic.ca
  Subject: Re: LDAP authentication
  In-Reply-To: <200810150212.m9F2CaP29689@momjian.us>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox