pg.ddx.io pgsql-admin@postgresql.org mailing list archive
help / color / mirror / Atom feedRequest for help
4+ messages / 4 participants
[nested] [flat]
* Request for help
@ 2013-08-09 19:49 ramanajvv@gmail.com
0 siblings, 3 replies; 4+ messages in thread
From: ramanajvv@gmail.com @ 2013-08-09 19:49 UTC (permalink / raw)
To: pgsql-admin
Hi,
We have recently converted our db2 database to PostgreSQL and we stuck on one thing I,e Authentication of users.
Let me explain what was in DB2,
We have a unix group "mhubrpt" on DB2 unix server and have connect permissions to DB2 database for that group.
Whenever user needs access to DB2 database we will add that user to DB2 unix server and assign to group mhubrpt, then user was getting access to DB2 database.
If user wants to connect DB2 database through graphical tool like Toad from any other windows operated machine he used to give unix server login credential (userid and password) at Tool.
We are planning to maintain same type of authentication in PostgreSQL, can you please help us.
Thanks,
Veera
Sent from my iPhone
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: Request for help
@ 2013-08-09 19:55 Shivakumar Ramannavar <shivasr@gmail.com>
parent: ramanajvv@gmail.com
2 siblings, 0 replies; 4+ messages in thread
From: Shivakumar Ramannavar @ 2013-08-09 19:55 UTC (permalink / raw)
To: ramanajvv@gmail.com; +Cc: pgsql-admin
Hi,
Even I am new but I think we need to configure in pga-hba config file as
below:
http://www.postgresql.org/docs/9.1/static/auth-pg-hba-conf.html
Thanks!
Shiva
On Sat, Aug 10, 2013 at 1:19 AM, <ramanajvv@gmail.com> wrote:
>
> Hi,
>
> We have recently converted our db2 database to PostgreSQL and we stuck on
> one thing I,e Authentication of users.
>
> Let me explain what was in DB2,
>
> We have a unix group "mhubrpt" on DB2 unix server and have connect
> permissions to DB2 database for that group.
> Whenever user needs access to DB2 database we will add that user to DB2
> unix server and assign to group mhubrpt, then user was getting access to
> DB2 database.
> If user wants to connect DB2 database through graphical tool like Toad
> from any other windows operated machine he used to give unix server login
> credential (userid and password) at Tool.
>
> We are planning to maintain same type of authentication in PostgreSQL, can
> you please help us.
>
> Thanks,
> Veera
>
> Sent from my iPhone
>
>
> --
> Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
> To make changes to your subscription:
> http://www.postgresql.org/mailpref/pgsql-admin
>
--
Shivakumar Ramannavar
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: Request for help
@ 2013-08-09 20:18 Jan Lentfer <Jan.Lentfer@web.de>
parent: ramanajvv@gmail.com
2 siblings, 0 replies; 4+ messages in thread
From: Jan Lentfer @ 2013-08-09 20:18 UTC (permalink / raw)
To: pgsql-admin
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Am 09.08.2013 21:49, schrieb ramanajvv@gmail.com:
> We have recently converted our db2 database to PostgreSQL and we
> stuck on one thing I,e Authentication of users.
>
> Let me explain what was in DB2,
>
> We have a unix group "mhubrpt" on DB2 unix server and have connect
> permissions to DB2 database for that group. Whenever user needs
> access to DB2 database we will add that user to DB2 unix server and
> assign to group mhubrpt, then user was getting access to DB2
> database. If user wants to connect DB2 database through graphical
> tool like Toad from any other windows operated machine he used to
> give unix server login credential (userid and password) at Tool.
>
> We are planning to maintain same type of authentication in
> PostgreSQL, can you please help us.
PostgreSQL does not use - different to e.g. Informix and DB2 - use the
user administration of the underlying operating system.
You can achieve what you described just by adding users as a
postgresql login role and giving them connect and other priviliges
(e.g. SELECT, etc) on the databse, schema, table... etc as you like.
Using a "group" role might ease your privilige administration.
http://www.postgresql.org/docs/9.2/static/user-manag.html
Hope this helps
Jan
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/
iQEcBAEBAgAGBQJSBU6QAAoJEIJ7qif/sHv9YFMIAIx3H4vhJRk7N6SphvaYLe2Z
JopPwMDIBWNJL82iXD/tT/eSYmy9g/7sZGsFY/xpbHNXqOuJnQVw886JCi0I6jWH
2ibm9kI/nIK+/xSxLWJJJNzlE7iwxZoczIxcDMSi0+tZmy9EuyPdpr6K4r+cskCH
BIgxJ3HPCDuXTOlyvKow/iK47lZyNilBEvqauUH9lfl5B2sRkKrnOWOjiITdZzCg
pNJ4oYIg/Qc0hisZYjvTHXnMEv0GWAuKfrJ9FQ/v3YLLx4C05GFxbSAwUA2yzmDF
IyfhP9m//wjoozLoQSvqs3p6J50ivot5e/zCO/FUv3/e73eJdHLYzFrUrEXs+Fs=
=Twlz
-----END PGP SIGNATURE-----
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: Request for help
@ 2013-08-12 06:37 Christian Ullrich <chris@chrullrich.net>
parent: ramanajvv@gmail.com
2 siblings, 0 replies; 4+ messages in thread
From: Christian Ullrich @ 2013-08-12 06:37 UTC (permalink / raw)
To: pgsql-admin
* ramanajvv@gmail.com wrote:
> We have a unix group "mhubrpt" on DB2 unix server and have connect permissions to DB2 database for that group.
> Whenever user needs access to DB2 database we will add that user to DB2 unix server and assign to group mhubrpt, then user was getting access to DB2 database.
> If user wants to connect DB2 database through graphical tool like Toad from any other windows operated machine he used to give unix server login credential (userid and password) at Tool.
>
> We are planning to maintain same type of authentication in PostgreSQL, can you please help us.
You should be able to use PAM authentication, but you will have to
duplicate the users/groups in the database as well because PostgreSQL
does not refer to the system's user accounts.
If you want to create users in only one place, that must be the database.
--
Christian
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
^ permalink raw reply [nested|flat] 4+ messages in thread
end of thread, other threads:[~2013-08-12 06:37 UTC | newest]
Thread overview: 4+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2013-08-09 19:49 Request for help ramanajvv@gmail.com
2013-08-09 19:55 ` Shivakumar Ramannavar <shivasr@gmail.com>
2013-08-09 20:18 ` Jan Lentfer <Jan.Lentfer@web.de>
2013-08-12 06:37 ` Christian Ullrich <chris@chrullrich.net>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox