Received: from localhost (unknown [200.46.204.183]) by postgresql.org (Postfix) with ESMTP id 84F0B37C6E4 for ; Fri, 10 Oct 2008 19:25:07 -0300 (ADT) Received: from postgresql.org ([200.46.204.86]) by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 07543-06 for ; Fri, 10 Oct 2008 19:25:04 -0300 (ADT) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from dog.comp.uvic.ca (dog.comp.uvic.ca [142.104.5.222]) by postgresql.org (Postfix) with ESMTP id EC6E937C128 for ; Fri, 10 Oct 2008 19:25:03 -0300 (ADT) Received: from [142.104.191.242] (strike.comp.uvic.ca [142.104.191.242]) by dog.comp.uvic.ca (8.13.8/8.13.8) with ESMTP id m9AMP02L011881 for ; Fri, 10 Oct 2008 15:25:01 -0700 Message-ID: <48EFD63C.30507@uvic.ca> Date: Fri, 10 Oct 2008 15:25:00 -0700 From: Evan Rempel User-Agent: Thunderbird 1.5.0.12 (X11/20070530) MIME-Version: 1.0 To: "pgsql-admin@postgresql.org" Subject: Re: LDAP authentication References: <006b01c8b76a$690c0170$14010a0a@dei26g028575> <48ED2DE4.80305@uvic.ca> In-Reply-To: <48ED2DE4.80305@uvic.ca> Content-Type: text/plain; charset=iso-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-UVic-Virus-Scanned: OK - Passed virus scan by Sophos (sophie) on dog X-UVic-Spam-Scan: dog.comp.uvic.ca Not_scanned_LOCAL X-Scanned-By: MIMEDefang 2.63 on 142.104.5.91 X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=0 tagged_above=0 required=5 tests=none X-Spam-Level: X-Archive-Number: 200810/92 X-Sequence-Number: 30548 Well, the list became very quiet on this question. Can anyone chime in with suggestions to have some accounts authenticated by ldap and the remainder by MD5 Evan. Evan Rempel wrote: > I would like to use password authentication for most users, but LDAP authentication for the remaining ones users, > There will be no overlap of login names. > > I do not really want to create an entry in the pg_hba.conf file for each login. What I would like is > something like > > > host all all 142.104.0.0/24 MD5 > host all all 142.104.0.0/24 ldap... > > in hopes that if the account can be authenticated by MD5 local postgresql accounts, then it is, > otherwise it will be authenticated by ldap. > > Is this type of setup possible? -- Evan Rempel