From: Robert Treat <xzilla@users.sourceforge.net>
To: pgsql-admin@postgresql.org
Cc: Shilpa Sudhakar <ssudhakar@internode.com.au>
Subject: Re: ident authentication
Date: Sat, 29 Nov 2008 13:38:47 -0500
Message-ID: <200811291338.47861.xzilla@users.sourceforge.net> (raw)
In-Reply-To: <49264DA5.4090806@internode.com.au>
References: <49264DA5.4090806@internode.com.au>
On Friday 21 November 2008 00:56:53 Shilpa Sudhakar wrote:
> Hi,
>
> I am trying to test different kinds of authentication in postgres.
>
> I'm to find a efficient way to link the OS user with the postgres user.
> This is to help for auditing purpose. This is similar to the query
> raised by another postgres user.
>
> As suggested by Tom to use ident, i tried setting up ident but it isn't
> working.
>
> In the hba.conf file, i add the below entry
>
> local all all ident sameuser
>
did you reload the file after modifying it?
> The user logged in at OS level is "abc". I created a user "abc" in
> postgres but when i do "psql -U abc -d dbname", i get the below error:
>
> FATAL: Ident authentication failed for user "abc"
>
What error do you get if you do "psql -d dbname" ?
> Should i put an entry in pg_ident.conf file?
>
> Is using ident still the right way to go? Is LDAP a better option
> because when we login to the server, we login with our LDAP username and
> password.
>
> Thanks and Regards,
> Shilpa
--
Robert Treat
Conjecture: http://www.xzilla.net
Consulting: http://www.omniti.com
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: xzilla@users.sourceforge.net, ssudhakar@internode.com.au
Subject: Re: ident authentication
In-Reply-To: <200811291338.47861.xzilla@users.sourceforge.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox