Received: from localhost (unknown [200.46.204.183]) by postgresql.org (Postfix) with ESMTP id 07F9664FD83 for ; Tue, 14 Oct 2008 23:12:44 -0300 (ADT) Received: from postgresql.org ([200.46.204.86]) by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 93925-04 for ; Tue, 14 Oct 2008 23:12:41 -0300 (ADT) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from momjian.us (momjian.us [70.90.9.53]) by postgresql.org (Postfix) with ESMTP id 10C4A64FD82 for ; Tue, 14 Oct 2008 23:12:40 -0300 (ADT) Received: (from bruce@localhost) by momjian.us (8.11.6/8.11.6) id m9F2CaP29689; Tue, 14 Oct 2008 22:12:36 -0400 (EDT) From: Bruce Momjian Message-Id: <200810150212.m9F2CaP29689@momjian.us> Subject: Re: LDAP authentication In-Reply-To: <48EFD63C.30507@uvic.ca> To: Evan Rempel Date: Tue, 14 Oct 2008 22:12:36 -0400 (EDT) CC: "pgsql-admin@postgresql.org" X-Mailer: ELM [version 2.4ME+ PL124 (25)] MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="US-ASCII" X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=0 tagged_above=0 required=5 tests=none X-Spam-Level: X-Archive-Number: 200810/110 X-Sequence-Number: 30566 Evan Rempel wrote: > Well, the list became very quiet on this question. Can anyone chime in with > suggestions to have some accounts authenticated by ldap and the remainder by MD5 Create a group/role and list that in pg_hba.conf for each authentication method. --------------------------------------------------------------------------- > > Evan. > > Evan Rempel wrote: > > I would like to use password authentication for most users, but LDAP authentication for the remaining ones users, > > There will be no overlap of login names. > > > > I do not really want to create an entry in the pg_hba.conf file for each login. What I would like is > > something like > > > > > > host all all 142.104.0.0/24 MD5 > > host all all 142.104.0.0/24 ldap... > > > > in hopes that if the account can be authenticated by MD5 local postgresql accounts, then it is, > > otherwise it will be authenticated by ldap. > > > > Is this type of setup possible? > > -- > Evan Rempel > > -- > Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org) > To make changes to your subscription: > http://www.postgresql.org/mailpref/pgsql-admin -- Bruce Momjian http://momjian.us EnterpriseDB http://enterprisedb.com + If your life is a hard drive, Christ can be your backup. +