pg.ddx.io pgsql-admin@postgresql.org mailing list archivehelp / color / mirror / Atom feed
PostgreSQL LDAP \ Kerberos 2+ messages / 2 participants [nested] [flat]
* PostgreSQL LDAP \ Kerberos @ 2019-07-12 09:11 Pierre Ochsenbein <pierreochsenbein@gmail.com> 0 siblings, 1 reply; 2+ messages in thread From: Pierre Ochsenbein @ 2019-07-12 09:11 UTC (permalink / raw) To: pgsql-admin Guys, Somebody can give me Feedback about PostgreSQL Authentication with LDAP and Kerberos. Actually I use LDAP authentication and I would like to test automatically authentication with Kerberos... It's easy to implement and works fine, no bugs in perspective? Thanks for your feedback ^ permalink raw reply [nested|flat] 2+ messages in thread
* Re: PostgreSQL LDAP \ Kerberos @ 2019-07-12 12:18 Stephen Frost <sfrost@snowman.net> parent: Pierre Ochsenbein <pierreochsenbein@gmail.com> 0 siblings, 0 replies; 2+ messages in thread From: Stephen Frost @ 2019-07-12 12:18 UTC (permalink / raw) To: Pierre Ochsenbein <pierreochsenbein@gmail.com>; +Cc: pgsql-admin Greetings, * Pierre Ochsenbein (pierreochsenbein@gmail.com) wrote: > Somebody can give me Feedback about PostgreSQL Authentication with LDAP and > Kerberos. You should use Kerberos for authentication, using LDAP isn't a good idea because the PG server will see the user's password. > Actually I use LDAP authentication and I would like to test automatically > authentication with Kerberos... > > It's easy to implement and works fine, no bugs in perspective? Yes, it works fine, just generate a keytab and copy it to somewhere that the PG server can see it. If you're in an active directory environment then this requires a bit more than just an addprinc/ktadd, there's a blog post I wrote about doing it here: https://info.crunchydata.com/blog/windows-active-directory-postgresql-gssapi-kerberos-authentication Thanks, Stephen Attachments: signature.asc (application/pgp-signature, 818B) download ^ permalink raw reply [nested|flat] 2+ messages in thread
end of thread, other threads:[~2019-07-12 12:18 UTC | newest] Thread overview: 2+ messages (download: mbox mbox.gz follow: Atom feed) -- links below jump to the message on this page -- 2019-07-12 09:11 PostgreSQL LDAP \ Kerberos Pierre Ochsenbein <pierreochsenbein@gmail.com> 2019-07-12 12:18 ` Stephen Frost <sfrost@snowman.net>
This inbox is served by DDX for PostgreSQL; see mirroring instructions for how to clone and mirror all data and code used for this inbox