From: Tom Lane <tgl@sss.pgh.pa.us>
To: "Lentes, Bernd" <bernd.lentes@helmholtz-muenchen.de>
cc: pgsql-admin@lists.postgresql.org
Subject: Re: User Authentication: LDAP and "local" accounts concurrently ?
In-reply-to: 
 <1819852155.20922807.1542983802608.JavaMail.zimbra@helmholtz-muenchen.de>
References: 
 <1819852155.20922807.1542983802608.JavaMail.zimbra@helmholtz-muenchen.de>
Comments: In-reply-to "Lentes, Bernd" <bernd.lentes@helmholtz-muenchen.de>
	message dated "Fri, 23 Nov 2018 15:36:42 +0100"
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <23113.1542984456.1@sss.pgh.pa.us>
Content-Transfer-Encoding: quoted-printable
Date: Fri, 23 Nov 2018 09:47:36 -0500
Message-ID: <23114.1542984456@sss.pgh.pa.us>
Precedence: bulk

"Lentes, Bernd" <bernd.lentes@helmholtz-muenchen.de> writes:
> i created a Postgres Server 9.6 on a SLES 12 SP3 box. In our institution=
 we have a Windows ADS which i like to use to authenticate users via LDAP.=
 But because there are several prerequisites to create such an account, wh=
ich make things
> sometime complicated, i also like to create "local" users (users defined=
 in the postgres DB itself).
> Is it possible to use both concurrently ? Some users autheticate via LDA=
P, others local.

I think you could put the two sets of users into different groups and then
specify those groups in two sets of pg_hba.conf entries.

			regards, tom lane