pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  
help / color / mirror / Atom feed
Request for help
4+ messages / 4 participants
[nested] [flat]

* Request for help
@ 2013-08-09 19:49 ramanajvv@gmail.com
  2013-08-09 19:55 ` Re: Request for help Shivakumar Ramannavar <shivasr@gmail.com>
  2013-08-09 20:18 ` Re: Request for help Jan Lentfer <Jan.Lentfer@web.de>
  2013-08-12 06:37 ` Re: Request for help Christian Ullrich <chris@chrullrich.net>
  0 siblings, 3 replies; 4+ messages in thread

From: ramanajvv@gmail.com @ 2013-08-09 19:49 UTC (permalink / raw)
  To: pgsql-admin


Hi, 

We have recently converted our db2 database to PostgreSQL and we stuck on one thing I,e Authentication of users.

Let me explain what was in DB2,

We have a unix group "mhubrpt" on DB2 unix server and have connect permissions to DB2 database for that group.
Whenever user needs access to DB2 database we will add that user to DB2 unix server and assign to group mhubrpt, then user was getting access to DB2 database.
If user wants to connect DB2 database through graphical tool like Toad from any other windows operated machine he used to give unix server login credential (userid and password) at Tool.

We are planning to maintain same type of authentication in PostgreSQL, can you please help us.

Thanks,
Veera

Sent from my iPhone


-- 
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin



^ permalink  raw  reply  [nested|flat] 4+ messages in thread

* Re: Request for help
  2013-08-09 19:49 Request for help ramanajvv@gmail.com
@ 2013-08-09 19:55 ` Shivakumar Ramannavar <shivasr@gmail.com>
  2 siblings, 0 replies; 4+ messages in thread

From: Shivakumar Ramannavar @ 2013-08-09 19:55 UTC (permalink / raw)
  To: ramanajvv@gmail.com; +Cc: pgsql-admin

Hi,

Even I am new but I think we need to configure in pga-hba config file as
below:

http://www.postgresql.org/docs/9.1/static/auth-pg-hba-conf.html

Thanks!
Shiva


On Sat, Aug 10, 2013 at 1:19 AM, <ramanajvv@gmail.com> wrote:

>
> Hi,
>
> We have recently converted our db2 database to PostgreSQL and we stuck on
> one thing I,e Authentication of users.
>
> Let me explain what was in DB2,
>
> We have a unix group "mhubrpt" on DB2 unix server and have connect
> permissions to DB2 database for that group.
> Whenever user needs access to DB2 database we will add that user to DB2
> unix server and assign to group mhubrpt, then user was getting access to
> DB2 database.
> If user wants to connect DB2 database through graphical tool like Toad
> from any other windows operated machine he used to give unix server login
> credential (userid and password) at Tool.
>
> We are planning to maintain same type of authentication in PostgreSQL, can
> you please help us.
>
> Thanks,
> Veera
>
> Sent from my iPhone
>
>
> --
> Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
> To make changes to your subscription:
> http://www.postgresql.org/mailpref/pgsql-admin
>



-- 
Shivakumar Ramannavar

^ permalink  raw  reply  [nested|flat] 4+ messages in thread

* Re: Request for help
  2013-08-09 19:49 Request for help ramanajvv@gmail.com
@ 2013-08-09 20:18 ` Jan Lentfer <Jan.Lentfer@web.de>
  2 siblings, 0 replies; 4+ messages in thread

From: Jan Lentfer @ 2013-08-09 20:18 UTC (permalink / raw)
  To: pgsql-admin

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Am 09.08.2013 21:49, schrieb ramanajvv@gmail.com:
> We have recently converted our db2 database to PostgreSQL and we
> stuck on one thing I,e Authentication of users.
> 
> Let me explain what was in DB2,
> 
> We have a unix group "mhubrpt" on DB2 unix server and have connect
> permissions to DB2 database for that group. Whenever user needs
> access to DB2 database we will add that user to DB2 unix server and
> assign to group mhubrpt, then user was getting access to DB2
> database. If user wants to connect DB2 database through graphical
> tool like Toad from any other windows operated machine he used to
> give unix server login credential (userid and password) at Tool.
> 
> We are planning to maintain same type of authentication in
> PostgreSQL, can you please help us.

PostgreSQL does not use - different to e.g. Informix and DB2 - use the
user administration of the underlying operating system.
You can achieve what you described just by adding users as a
postgresql login role and giving them connect and other priviliges
(e.g. SELECT, etc) on the databse, schema, table... etc as you like.
Using a "group" role might ease your privilige administration.

http://www.postgresql.org/docs/9.2/static/user-manag.html

Hope this helps

Jan

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/

iQEcBAEBAgAGBQJSBU6QAAoJEIJ7qif/sHv9YFMIAIx3H4vhJRk7N6SphvaYLe2Z
JopPwMDIBWNJL82iXD/tT/eSYmy9g/7sZGsFY/xpbHNXqOuJnQVw886JCi0I6jWH
2ibm9kI/nIK+/xSxLWJJJNzlE7iwxZoczIxcDMSi0+tZmy9EuyPdpr6K4r+cskCH
BIgxJ3HPCDuXTOlyvKow/iK47lZyNilBEvqauUH9lfl5B2sRkKrnOWOjiITdZzCg
pNJ4oYIg/Qc0hisZYjvTHXnMEv0GWAuKfrJ9FQ/v3YLLx4C05GFxbSAwUA2yzmDF
IyfhP9m//wjoozLoQSvqs3p6J50ivot5e/zCO/FUv3/e73eJdHLYzFrUrEXs+Fs=
=Twlz
-----END PGP SIGNATURE-----


-- 
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin



^ permalink  raw  reply  [nested|flat] 4+ messages in thread

* Re: Request for help
  2013-08-09 19:49 Request for help ramanajvv@gmail.com
@ 2013-08-12 06:37 ` Christian Ullrich <chris@chrullrich.net>
  2 siblings, 0 replies; 4+ messages in thread

From: Christian Ullrich @ 2013-08-12 06:37 UTC (permalink / raw)
  To: pgsql-admin

* ramanajvv@gmail.com wrote:

> We have a unix group "mhubrpt" on DB2 unix server and have connect permissions to DB2 database for that group.
> Whenever user needs access to DB2 database we will add that user to DB2 unix server and assign to group mhubrpt, then user was getting access to DB2 database.
> If user wants to connect DB2 database through graphical tool like Toad from any other windows operated machine he used to give unix server login credential (userid and password) at Tool.
>
> We are planning to maintain same type of authentication in PostgreSQL, can you please help us.

You should be able to use PAM authentication, but you will have to 
duplicate the users/groups in the database as well because PostgreSQL 
does not refer to the system's user accounts.

If you want to create users in only one place, that must be the database.

-- 
Christian




-- 
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin



^ permalink  raw  reply  [nested|flat] 4+ messages in thread


end of thread, other threads:[~2013-08-12 06:37 UTC | newest]

Thread overview: 4+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2013-08-09 19:49 Request for help ramanajvv@gmail.com
2013-08-09 19:55 ` Shivakumar Ramannavar <shivasr@gmail.com>
2013-08-09 20:18 ` Jan Lentfer <Jan.Lentfer@web.de>
2013-08-12 06:37 ` Christian Ullrich <chris@chrullrich.net>

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox