Received: from magus.postgresql.org (magus.postgresql.org [87.238.57.229])
	by mail.postgresql.org (Postfix) with ESMTP id 885D35EC6B9
	for <pgsql-admin@postgresql.org>; Mon, 16 Jan 2012 10:41:16 -0400 (AST)
Received: from [2001:4d88:1ffc:463::1] (helo=uvena.de)
	by magus.postgresql.org with esmtp (Exim 4.72)
	(envelope-from <frank@frank.uvena.de>) id 1RmnkJ-0005NL-GW
	for pgsql-admin@postgresql.org; Mon, 16 Jan 2012 14:41:16 +0000
Received: from [141.35.39.175] (c319808.zuv.uni-jena.de [141.35.39.175])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by uvena.de (Postfix) with ESMTPSA id 0FF6D254128
	for <pgsql-admin@postgresql.org>; Mon, 16 Jan 2012 14:41:01 +0000 (UTC)
Message-ID: <4F143719.5010604@frank.uvena.de>
Date: Mon, 16 Jan 2012 15:41:29 +0100
From: Frank Lanitz <frank@frank.uvena.de>
User-Agent: Mozilla/5.0 (Windows NT 6.1;
	rv:9.0) Gecko/20111222 Thunderbird/9.0.1
MIME-Version: 1.0
To: pgsql-admin@postgresql.org
Subject: LDAP vs. local users
X-Enigmail-Version: 1.3.4
Content-Type: text/plain; charset=ISO-8859-15
Content-Transfer-Encoding: 7bit
X-Host-Lookup-Failed: Reverse DNS lookup failed for 2001:4d88:1ffc:463::1
	(failed)
X-Pg-Spam-Score: 1.6 (+)
X-Archive-Number: 201201/56
X-Sequence-Number: 38968

Hi admins,

I've got a question according a setup including LDAP and local users.
Currently we do have kind of a double setup: Local users that are
assigned to roles but authenticating via LDAP.
Issue is now: It happens that the user's access is expiring from
database point of view, but user is still able to authenticate via LDAP
as account is still valid. On local only users this can be done via
setting an endtime on validly of user. But how could this be done in
setup where the authentication is done via LDAP? Any best practice?

Thanks,
Frank