Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dfz95-0002xE-9p for pgsql-admin@arkaria.postgresql.org; Fri, 11 Aug 2017 01:53:51 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.84_2) (envelope-from ) id 1dfz94-0001n8-Sf for pgsql-admin@arkaria.postgresql.org; Fri, 11 Aug 2017 01:53:50 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1dfz8u-0001Xb-C4 for pgsql-admin@postgresql.org; Fri, 11 Aug 2017 01:53:40 +0000 Received: from tamriel.snowman.net ([2001:470:e38f::11]) by magus.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dfz8r-0007a6-FK for pgsql-admin@postgresql.org; Fri, 11 Aug 2017 01:53:39 +0000 Received: by tamriel.snowman.net (Postfix, from userid 1000) id CE9605F795; Thu, 10 Aug 2017 21:53:36 -0400 (EDT) Date: Thu, 10 Aug 2017 21:53:36 -0400 From: Stephen Frost To: Jeffrey Shaw Cc: "Tang, Ronald K CIV FNMOC, N6" , "pgsql-admin@postgresql.org" Subject: Re: Postgres user authentication with secure LDAP Message-ID: <20170811015336.GH4628@tamriel.snowman.net> References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="DbLwIXqnMNXxdFHq" Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-admin Precedence: bulk Sender: pgsql-admin-owner@postgresql.org --DbLwIXqnMNXxdFHq Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Greetings, * Jeffrey Shaw (shawjef3@gmail.com) wrote: > What OS is your server running, and what OS is your client running? Good question. > I found that it was only possible to get clients from a Windows machine to > authenticate via ldap against a server that was also running Windows. > Hopefully someone else has more experience here than me. That shouldn't be the case, so I'm curious as to what was going on there.. That said, I'd strongly recommend using GSSAPI/Kerberos if the environment is a Windows Active Directory one, as it's much more secure and works quite well. Thanks! Stephen --DbLwIXqnMNXxdFHq Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJZjQ4gAAoJEO1sijiDR2RVCYoP/jTJzevPe1Eslnqu7xoIq6at W8uJ8WreNqA8VVIDtjUzRlHP5y6mw6J/pHl5q77ZzmSH261aFoYJFo+kt+GVi5nG a06GjHCYEi7qtjkLXD7b4+eWDs2MjyS91wbSpcAZAdpmARpqm2SKojwOLSbJRuu3 PJ+4CdG2oXqBFB2fDhg766bDLfGBxWw3u96K27sB8fJ1a3Yemz9pqvU/Ghj2Pni7 MQtmlNaLim5UY5j3mLw+l2FhBcfRU03pum3x8AmrNYb7DFBt74D1n84Dryu4jTp3 KCjv4/HjlUtXi+touFmTcZYE4VYZmnPtyRH+qEoBrvKuy+bObUMQkyZkwR7vmEma l9uUrfXZkERCWa3teOwpokNnTbFrMWWK1nQQJsPN50YfaUHsYJS5Pn1nXdVEUR1Y cfWDi201vBSY96hRvyTCWvsQLZ9zXrQtWWAQCZRUHO2wdPXJmlIyefPenCOAfKbJ TEEFXDHcRHg1fPshl+1aUSU40OHcA60IeyHE5nf+inJZaKUovn23L2pzclrPk++Q ep5ACGT3V5yQe8yp4QAiHoX3codW+1Eq0PbJNl+kXCzVHBGheZWPN7PQTnAfykJR l8oyzXqTZy5ZchXOusG9nCRbNM93xJu7wssHewz3ZI1GowCmcnYbgif0pFMqua8/ keqAsAFRb1R1dtYg/1ed =IeTU -----END PGP SIGNATURE----- --DbLwIXqnMNXxdFHq--