Received: from malur.postgresql.org ([217.196.149.56])
	by arkaria.postgresql.org with esmtps
 (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <pgsql-admin-owner+archive@lists.postgresql.org>)
	id 1lk4ic-0003e9-5B
	for pgsql-admin@arkaria.postgresql.org; Fri, 21 May 2021 12:57:34 +0000
Received: from localhost ([127.0.0.1] helo=malur.postgresql.org)
	by malur.postgresql.org with esmtp (Exim 4.92)
	(envelope-from <pgsql-admin-owner+archive@lists.postgresql.org>)
	id 1lk4ia-0005NW-QV
	for pgsql-admin@arkaria.postgresql.org; Fri, 21 May 2021 12:57:32 +0000
Received: from makus.postgresql.org ([2001:4800:3e1:1::229])
	by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <r.kreutz@prodat-sql.de>)
	id 1lk4ia-0005NO-Hg
	for pgsql-admin@lists.postgresql.org; Fri, 21 May 2021 12:57:32 +0000
Received: from mail.prodat-sql.de ([116.202.227.166])
	by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <r.kreutz@prodat-sql.de>)
	id 1lk4iY-00055i-5Q
	for pgsql-admin@lists.postgresql.org; Fri, 21 May 2021 12:57:31 +0000
Received: from [192.168.122.168] ([116.202.227.166])
        by mail.prodat-sql.de (IceWarp 12.0.2.1 x64) with ASMTP (SSL) id
 202105211457278624
        for <pgsql-admin@lists.postgresql.org>;
 Fri, 21 May 2021 14:57:27 +0200
Subject: Re: Secure LDAP auth on windows machine inside domain
To: pgsql-admin@lists.postgresql.org
References: <09ba8d97-6d81-2be9-0ada-7036c7d490df@prodat-sql.de>
 <44dd37ad-696a-f7a7-bf0a-ee59f08294c8@jakobs.com>
From: Rocco Kreutz <r.kreutz@prodat-sql.de>
Message-ID: <38c64d8a-1e64-59cb-0ef6-65da2abeb096@prodat-sql.de>
Date: Fri, 21 May 2021 14:57:27 +0200
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101
 Thunderbird/78.10.1
MIME-Version: 1.0
In-Reply-To: <44dd37ad-696a-f7a7-bf0a-ee59f08294c8@jakobs.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
List-Id: <pgsql-admin.lists.postgresql.org>
List-Help: <https://lists.postgresql.org/manage/>
List-Subscribe: <https://lists.postgresql.org/manage/>
List-Post: <mailto:pgsql-admin@lists.postgresql.org>
List-Owner: <mailto:pgsql-admin-owner@lists.postgresql.org>
List-Archive: <https://www.postgresql.org/list/pgsql-admin>
Archived-At: 
 <https://www.postgresql.org/message-id/38c64d8a-1e64-59cb-0ef6-65da2abeb096%40prodat-sql.de>
Precedence: bulk

It must be LDAP, because the users need to use a shortened diffrent 
login, which is stored in ad
>> If both your clients and server are running on Windows, the best 
>> authentication method is SSPI.
>>