pg.ddx.io pgsql-admin@postgresql.org mailing list archive
help / color / mirror / Atom feedLDAP authentication
7+ messages / 6 participants
[nested] [flat]
* LDAP authentication
@ 2008-10-08 22:02 Evan Rempel <erempel@uvic.ca>
2008-10-10 22:25 ` Re: LDAP authentication Evan Rempel <erempel@uvic.ca>
0 siblings, 1 reply; 7+ messages in thread
From: Evan Rempel @ 2008-10-08 22:02 UTC (permalink / raw)
To: pgsql-admin
I would like to use password authentication for most users, but LDAP authentication for the remaining ones users,
There will be no overlap of login names.
I do not really want to create an entry in the pg_hba.conf file for each login. What I would like is
something like
host all all 142.104.0.0/24 MD5
host all all 142.104.0.0/24 ldap...
in hopes that if the account can be authenticated by MD5 local postgresql accounts, then it is,
otherwise it will be authenticated by ldap.
Is this type of setup possible?
Evan Rempel.
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: LDAP authentication
2008-10-08 22:02 LDAP authentication Evan Rempel <erempel@uvic.ca>
@ 2008-10-10 22:25 ` Evan Rempel <erempel@uvic.ca>
2008-10-15 02:12 ` Re: LDAP authentication Bruce Momjian <bruce@momjian.us>
0 siblings, 1 reply; 7+ messages in thread
From: Evan Rempel @ 2008-10-10 22:25 UTC (permalink / raw)
To: pgsql-admin
Well, the list became very quiet on this question. Can anyone chime in with
suggestions to have some accounts authenticated by ldap and the remainder by MD5
Evan.
Evan Rempel wrote:
> I would like to use password authentication for most users, but LDAP authentication for the remaining ones users,
> There will be no overlap of login names.
>
> I do not really want to create an entry in the pg_hba.conf file for each login. What I would like is
> something like
>
>
> host all all 142.104.0.0/24 MD5
> host all all 142.104.0.0/24 ldap...
>
> in hopes that if the account can be authenticated by MD5 local postgresql accounts, then it is,
> otherwise it will be authenticated by ldap.
>
> Is this type of setup possible?
--
Evan Rempel
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: LDAP authentication
2008-10-08 22:02 LDAP authentication Evan Rempel <erempel@uvic.ca>
2008-10-10 22:25 ` Re: LDAP authentication Evan Rempel <erempel@uvic.ca>
@ 2008-10-15 02:12 ` Bruce Momjian <bruce@momjian.us>
0 siblings, 0 replies; 7+ messages in thread
From: Bruce Momjian @ 2008-10-15 02:12 UTC (permalink / raw)
To: Evan Rempel <erempel@uvic.ca>; +Cc: pgsql-admin
Evan Rempel wrote:
> Well, the list became very quiet on this question. Can anyone chime in with
> suggestions to have some accounts authenticated by ldap and the remainder by MD5
Create a group/role and list that in pg_hba.conf for each authentication
method.
---------------------------------------------------------------------------
>
> Evan.
>
> Evan Rempel wrote:
> > I would like to use password authentication for most users, but LDAP authentication for the remaining ones users,
> > There will be no overlap of login names.
> >
> > I do not really want to create an entry in the pg_hba.conf file for each login. What I would like is
> > something like
> >
> >
> > host all all 142.104.0.0/24 MD5
> > host all all 142.104.0.0/24 ldap...
> >
> > in hopes that if the account can be authenticated by MD5 local postgresql accounts, then it is,
> > otherwise it will be authenticated by ldap.
> >
> > Is this type of setup possible?
>
> --
> Evan Rempel
>
> --
> Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
> To make changes to your subscription:
> http://www.postgresql.org/mailpref/pgsql-admin
--
Bruce Momjian <bruce@momjian.us> http://momjian.us
EnterpriseDB http://enterprisedb.com
+ If your life is a hard drive, Christ can be your backup. +
^ permalink raw reply [nested|flat] 7+ messages in thread
* LDAP Authentication
@ 2011-05-20 12:31 Teguh R <taguah@gmail.com>
2011-05-20 12:54 ` Re: LDAP Authentication Raghavendra <raghavendra.rao@enterprisedb.com>
0 siblings, 1 reply; 7+ messages in thread
From: Teguh R @ 2011-05-20 12:31 UTC (permalink / raw)
To: pgsql-admin
Hi,
My first post, new to postgresql, forgive me if this is better suited to
other postgresql mailing list.
I would like to ask about LDAP authentication configuration. It is said
in documentation that first the installation compiled with LDAP option.
I use installer from official postresql site, is it LDAP authentication
ready?
Is there any straight tutorial for setting up LDAP authentication for
pg? where to put the LDAP configuration (pg_services.conf?) and other
step to make LDAP user can login using their id.
Thanks in advance,
Teguh
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: LDAP Authentication
2011-05-20 12:31 LDAP Authentication Teguh R <taguah@gmail.com>
@ 2011-05-20 12:54 ` Raghavendra <raghavendra.rao@enterprisedb.com>
0 siblings, 0 replies; 7+ messages in thread
From: Raghavendra @ 2011-05-20 12:54 UTC (permalink / raw)
To: Teguh R <taguah@gmail.com>; +Cc: pgsql-admin
Here is the setting information on pg_service.conf
http://www.postgresql.org/docs/9.0/interactive/libpq-pgservice.html
---
Best Regards,
Raghavendra
EnterpriseDB Corporation
Blog: http://raghavt.blogspot.com/
On Fri, May 20, 2011 at 6:01 PM, Teguh R <taguah@gmail.com> wrote:
> Hi,
>
> My first post, new to postgresql, forgive me if this is better suited to
> other postgresql mailing list.
>
> I would like to ask about LDAP authentication configuration. It is said in
> documentation that first the installation compiled with LDAP option. I use
> installer from official postresql site, is it LDAP authentication ready?
>
> Is there any straight tutorial for setting up LDAP authentication for pg?
> where to put the LDAP configuration (pg_services.conf?) and other step to
> make LDAP user can login using their id.
>
> Thanks in advance,
> Teguh
>
> --
> Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
> To make changes to your subscription:
> http://www.postgresql.org/mailpref/pgsql-admin
>
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: LDAP Authentication
@ 2011-05-20 13:27 Mark Johnson <mark@remingtondatabasesolutions.com>
2011-05-21 10:48 ` Re: LDAP Authentication teguh <taguah@gmail.com>
0 siblings, 1 reply; 7+ messages in thread
From: Mark Johnson @ 2011-05-20 13:27 UTC (permalink / raw)
To: Teguh R <taguah@gmail.com>; pgsql-admin
I too have been looking into this as a new user of PostgreSQL 9.0.
1. Before you install PostgreSQL you might want to verify the LDAP packages are installed. For example, on CentOS I might run "yum list openldap openldap-devel".
2. If you install PostgreSQL from source code, one of the steps is to run the "configure" utility. To use LDAP based authentication you should include the option "--with-ldap". You might also want "--with-openssl".
3. After PostgreSQL has been installed you can see which options were used built in using the command "$PGHOME/bin/pg_config --configure". Check the output. If there are no references to ldap, then go back to step 1.
4. You can also use this command to see if postgres is linked with the ldap libraries: "ldd $PGHOME/bin/postgres". If there are no references to ldap, then go back to steps 1 and 2.
I have not gone past this. I ran into an issue with the one-click installer on RHEL 6 that I'm stuck on.
-Mark
-----Original Message-----
From: Teguh R [mailto:taguah@gmail.com]
Sent: Friday, May 20, 2011 08:31 AM
To: pgsql-admin@postgresql.org
Subject: [ADMIN] LDAP Authentication
Hi, My first post, new to postgresql, forgive me if this is better suited to other postgresql mailing list. I would like to ask about LDAP authentication configuration. It is said in documentation that first the installation compiled with LDAP option. I use installer from official postresql site, is it LDAP authentication ready? Is there any straight tutorial for setting up LDAP authentication for pg? where to put the LDAP configuration (pg_services.conf?) and other step to make LDAP user can login using their id. Thanks in advance, Teguh -- Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-admin
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: LDAP Authentication
2011-05-20 13:27 Re: LDAP Authentication Mark Johnson <mark@remingtondatabasesolutions.com>
@ 2011-05-21 10:48 ` teguh <taguah@gmail.com>
0 siblings, 0 replies; 7+ messages in thread
From: teguh @ 2011-05-21 10:48 UTC (permalink / raw)
To: pgsql-admin
I did a test on Ubuntu 11.04, postgreql 9.0.4.1 - 32 bit installer, on non
LDAP authenticated desktop.
mi@mi-d525:/opt/PostgreSQL/9.0/bin$ ./pg_config --configure
'--with-libs=/usr/local/lib' '--with-includes=/usr/local/include'
'--prefix=/mnt/buildfarm/pginstaller/server/staging/linux' '--with-openssl'
'--with-perl' '--with-python' '--with-tcl'
'--with-tclconfig=/opt/ActiveTcl-8.5/lib' '--with-pam' '--with-krb5'
'--enable-thread-safety' '--with-libxml' '--with-ossp-uuid'
'--docdir=/mnt/buildfarm/pginstaller/server/staging/linux/doc/postgresql'
'--with-libxslt' '--with-libedit-preferred'
Looks like no --with-ldap option, but there is --with-openssl option. I will
trying with configure-make-install from source.
FYI, I use ds from Centos/Fedora.
^ permalink raw reply [nested|flat] 7+ messages in thread
end of thread, other threads:[~2011-05-21 10:48 UTC | newest]
Thread overview: 7+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2008-10-08 22:02 LDAP authentication Evan Rempel <erempel@uvic.ca>
2008-10-10 22:25 ` Evan Rempel <erempel@uvic.ca>
2008-10-15 02:12 ` Bruce Momjian <bruce@momjian.us>
2011-05-20 12:31 LDAP Authentication Teguh R <taguah@gmail.com>
2011-05-20 12:54 ` Re: LDAP Authentication Raghavendra <raghavendra.rao@enterprisedb.com>
2011-05-20 13:27 Re: LDAP Authentication Mark Johnson <mark@remingtondatabasesolutions.com>
2011-05-21 10:48 ` Re: LDAP Authentication teguh <taguah@gmail.com>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox