From: Stephen Frost <sfrost@snowman.net>
To: John Scalia <jayknowsunix@gmail.com>
Cc: Azimuddin Mohammed <azimeiu@gmail.com>
Cc: pgsql-admin@postgresql.org
Cc: pgsql-general@postgresql.org
Cc: pgsql-admin@lists.postgresql.org
Subject: Re: LDAP for postgres
Date: Wed, 7 Feb 2018 16:18:48 -0500
Message-ID: <20180207211848.GV2416@tamriel.snowman.net> (raw)
In-Reply-To: <5477B879-8164-4EB7-A145-46215530B81A@gmail.com>
References: <CAKUuFd7zzE2RRMWsZW9iiNQ9Os_-QjMaKvhx0ngg_uRFb=+O0A@mail.gmail.com>
<5477B879-8164-4EB7-A145-46215530B81A@gmail.com>
Greetings,
Please don't top-post. I'd also suggest not cross-posting.
* John Scalia (jayknowsunix@gmail.com) wrote:
> You’ll need to setup your pg_hba.conf file for LDAP. There are several different ways to do this, but a lot depends on how your LDAP server is setup. It’s impossible to really accurately say what you’ll need in that file.
If you are working in an Active Directory environment, you should really
be using Kerberos/GSSAPI, not LDAP. This is done by specifying 'gssapi'
in your pg_hba.conf.
Using LDAP for auth isn't secure and isn't necessary in an Active
Directory environment. If you are running an LDAP-only environment then
you should really be considering deployment of a proper authentication
system, such as MIT Kerberos or Heimdal Kerberos.
Thanks!
Stephen
Attachments:
signature.asc (application/pgp-signature, 818B) download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: sfrost@snowman.net, jayknowsunix@gmail.com, azimeiu@gmail.com, pgsql-general@postgresql.org, pgsql-admin@lists.postgresql.org
Subject: Re: LDAP for postgres
In-Reply-To: <20180207211848.GV2416@tamriel.snowman.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox