Received: from maia.hub.org (maia-3.hub.org [200.46.204.243]) by mail.postgresql.org (Postfix) with ESMTP id 4B7F2B5DE8C for ; Mon, 11 Jul 2011 09:31:15 -0300 (ADT) Received: from mail.postgresql.org ([200.46.204.86]) by maia.hub.org (mx1.hub.org [200.46.204.243]) (amavisd-maia, port 10024) with ESMTP id 89483-06 for ; Mon, 11 Jul 2011 12:31:07 +0000 (UTC) Received: from mx1.hub.org (mx1.hub.org [200.46.208.106]) by mail.postgresql.org (Postfix) with ESMTP id 8E02CB5DDF3 for ; Mon, 11 Jul 2011 09:31:07 -0300 (ADT) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from smadev.internal.net (host3.dynacom.ondsl.gr [62.103.35.211]) by mx1.hub.org (Postfix) with ESMTP id 7722B27FB636 for ; Mon, 11 Jul 2011 09:29:50 -0300 (ADT) Received: from smadev.internal.net (localhost.internal.net [127.0.0.1]) by smadev.internal.net (8.14.2/8.14.2) with ESMTP id p6B9FVwD010086 for ; Mon, 11 Jul 2011 12:15:31 +0300 (EEST) (envelope-from achill@matrix.gatewaynet.com) Received: from localhost (localhost [[UNIX: localhost]]) by smadev.internal.net (8.14.2/8.14.2/Submit) id p6B9FVih010085 for pgsql-admin@postgresql.org; Mon, 11 Jul 2011 12:15:31 +0300 (EEST) (envelope-from achill@matrix.gatewaynet.com) From: Achilleas Mantzios Organization: Dynacom Tankers Mgmt To: pgsql-admin@postgresql.org Subject: LDAP Authentication : How to set secondary server? Date: Mon, 11 Jul 2011 12:15:30 +0300 User-Agent: KMail/1.9.7 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <201107111215.30998.achill@matrix.gatewaynet.com> X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=-1.9 tagged_above=-10 required=5 tests=BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001 X-Spam-Level: X-Archive-Number: 201107/64 X-Sequence-Number: 37843 Hello, is there a way to set a secondary ldapserver in LDAP authentication in pg_hba.conf, such as that when the primary ldapserver is down (just the LDAP service or the whole host), postgresql to query the secondary ldap server for authentication? Is that possible? Or is there any notion of pg_hba.conf to be interpreted in a similar way like "sufficient" in JSSE or PAM? e.g. have two entries : host all all 127.0.0.1/32 ldap ldapserver=primaryldap.internal.net ldapbasedn="" host all all 127.0.0.1/32 ldap ldapserver=secondaryldap.internal.net ldapbasedn="" so that when the first fails, the user has a second chance to be queries in the second ldap server. Thanx for any help. -- Achilleas Mantzios