pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  
help / color / mirror / Atom feed
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Lentes, Bernd <bernd.lentes@helmholtz-muenchen.de>
Cc: pgsql-admin@lists.postgresql.org
Subject: Re: User Authentication: LDAP and "local" accounts concurrently ?
Date: Fri, 23 Nov 2018 09:47:36 -0500
Message-ID: <23114.1542984456@sss.pgh.pa.us> (raw)
In-Reply-To: <1819852155.20922807.1542983802608.JavaMail.zimbra@helmholtz-muenchen.de>
References: <1819852155.20922807.1542983802608.JavaMail.zimbra@helmholtz-muenchen.de>

"Lentes, Bernd" <bernd.lentes@helmholtz-muenchen.de> writes:
> i created a Postgres Server 9.6 on a SLES 12 SP3 box. In our institution we have a Windows ADS which i like to use to authenticate users via LDAP. But because there are several prerequisites to create such an account, which make things
> sometime complicated, i also like to create "local" users (users defined in the postgres DB itself).
> Is it possible to use both concurrently ? Some users autheticate via LDAP, others local.

I think you could put the two sets of users into different groups and then
specify those groups in two sets of pg_hba.conf entries.

			regards, tom lane




view thread (12+ messages)  latest in thread

Message-ID: <23114.1542984456@sss.pgh.pa.us>
Permalink:  ../23114.1542984456@sss.pgh.pa.us/
Also on:    postgresql.org/message-id/23114.1542984456@sss.pgh.pa.us

 · 

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-admin@postgresql.org
  Cc: tgl@sss.pgh.pa.us, bernd.lentes@helmholtz-muenchen.de, pgsql-admin@lists.postgresql.org
  Subject: Re: User Authentication: LDAP and "local" accounts concurrently ?
  In-Reply-To: <23114.1542984456@sss.pgh.pa.us>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox