From: Achilleas Mantzios <achill@matrix.gatewaynet.com>
To: pgsql-admin@postgresql.org
Subject: LDAP Authentication : How to set secondary server?
Date: Mon, 11 Jul 2011 12:15:30 +0300
Message-ID: <201107111215.30998.achill@matrix.gatewaynet.com> (raw)
Hello,
is there a way to set a secondary ldapserver in LDAP authentication in pg_hba.conf, such as that
when the primary ldapserver is down (just the LDAP service or the whole host), postgresql to query
the secondary ldap server for authentication?
Is that possible?
Or is there any notion of pg_hba.conf to be interpreted in a similar way like "sufficient" in JSSE or PAM?
e.g. have two entries :
host all all 127.0.0.1/32 ldap ldapserver=primaryldap.internal.net ldapbasedn=""
host all all 127.0.0.1/32 ldap ldapserver=secondaryldap.internal.net ldapbasedn=""
so that when the first fails, the user has a second chance to be queries in the second ldap server.
Thanx for any help.
--
Achilleas Mantzios
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: achill@matrix.gatewaynet.com
Subject: Re: LDAP Authentication : How to set secondary server?
In-Reply-To: <201107111215.30998.achill@matrix.gatewaynet.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox