From: Bruce Momjian <bruce@momjian.us>
To: Evan Rempel <erempel@uvic.ca>
Cc: pgsql-admin@postgresql.org <pgsql-admin@postgresql.org>
Subject: Re: LDAP authentication
Date: Tue, 14 Oct 2008 22:12:36 -0400 (EDT)
Message-ID: <200810150212.m9F2CaP29689@momjian.us> (raw)
In-Reply-To: <48EFD63C.30507@uvic.ca>
Evan Rempel wrote:
> Well, the list became very quiet on this question. Can anyone chime in with
> suggestions to have some accounts authenticated by ldap and the remainder by MD5
Create a group/role and list that in pg_hba.conf for each authentication
method.
---------------------------------------------------------------------------
>
> Evan.
>
> Evan Rempel wrote:
> > I would like to use password authentication for most users, but LDAP authentication for the remaining ones users,
> > There will be no overlap of login names.
> >
> > I do not really want to create an entry in the pg_hba.conf file for each login. What I would like is
> > something like
> >
> >
> > host all all 142.104.0.0/24 MD5
> > host all all 142.104.0.0/24 ldap...
> >
> > in hopes that if the account can be authenticated by MD5 local postgresql accounts, then it is,
> > otherwise it will be authenticated by ldap.
> >
> > Is this type of setup possible?
>
> --
> Evan Rempel
>
> --
> Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
> To make changes to your subscription:
> http://www.postgresql.org/mailpref/pgsql-admin
--
Bruce Momjian <bruce@momjian.us> http://momjian.us
EnterpriseDB http://enterprisedb.com
+ If your life is a hard drive, Christ can be your backup. +
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: bruce@momjian.us, erempel@uvic.ca
Subject: Re: LDAP authentication
In-Reply-To: <200810150212.m9F2CaP29689@momjian.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox