From: Stephen Frost <sfrost@snowman.net>
To: Anjul Tyagi <anjul@ibosstech-us.com>
Cc: pgsql-admin <pgsql-admin@postgresql.org>
Subject: Re: LDAP Configuration
Date: Wed, 1 Apr 2020 09:19:17 -0400
Message-ID: <20200401131917.GV13712@tamriel.snowman.net> (raw)
In-Reply-To: <em62afb13f-e34b-48c8-8500-7edfd179a57b@iboss01108>
References: <em62afb13f-e34b-48c8-8500-7edfd179a57b@iboss01108>
Greetings,
* Anjul Tyagi (anjul@ibosstech-us.com) wrote:
> we are implementing the LDAP authentication and we are able to connect with
> LDAP and able to authenticate the user with that. However we have 2 type of
> users, one - corporate users and available of Active Directory and second
> application user, which is used by different application to connect with
> database.
In an Active Directory environment, you really should be using Kerberos
(also known as GSSAPI) for authentication, using LDAP isn't secure as it
means that the user's password will be sent to the PostgreSQL server.
Thanks,
Stephen
Attachments:
signature.asc (application/pgp-signature, 818B) download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: sfrost@snowman.net, anjul@ibosstech-us.com
Subject: Re: LDAP Configuration
In-Reply-To: <20200401131917.GV13712@tamriel.snowman.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox