From: Stephen Frost <sfrost@snowman.net>
To: John Scalia <jayknowsunix@gmail.com>
Cc: pgsql-admin@postgresql.org <pgsql-admin@postgresql.org>
Subject: Re: authenticating using Active Directory?
Date: Sat, 7 Mar 2015 08:57:29 -0500
Message-ID: <20150307135729.GC29780@tamriel.snowman.net> (raw)
In-Reply-To: <54FA69F0.304@gmail.com>
References: <54FA69F0.304@gmail.com>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-admin>
Jay,,
* John Scalia (jayknowsunix@gmail.com) wrote:
> A new federal related project has asked me if PostgreSQL can authenticate a user using Active Directory or LDAP. I've never used either of these and therefore have no real idea.
> Hence, my question. Is there a way to use either of these technologies to authenticate a user?
The short answer is yes. Active Directory uses Kerberos for
authentication, which PostgreSQL supports through the GSS authentication
mechanism.
LDAP authentication is also supported but is strongly discouraged in an
Active Directory environment (by Microsoft) as Kerberos should be used
instead since it's a much more secure solution. LDAP-based
authentication requires sending the password to PG as cleartext.
Thanks!
Stephen
Attachments:
signature.asc (application/pgp-signature, 818B) download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: sfrost@snowman.net, jayknowsunix@gmail.com
Subject: Re: authenticating using Active Directory?
In-Reply-To: <20150307135729.GC29780@tamriel.snowman.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox