Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1p7LXm-0000EX-Vy for pgsql-admin@arkaria.postgresql.org; Mon, 19 Dec 2022 19:11:23 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1p7LXl-0003Zq-SN for pgsql-admin@arkaria.postgresql.org; Mon, 19 Dec 2022 19:11:21 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1p7LXl-0003Zh-Fj for pgsql-admin@lists.postgresql.org; Mon, 19 Dec 2022 19:11:21 +0000 Received: from mail-qt1-x831.google.com ([2607:f8b0:4864:20::831]) by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1p7LXj-0002Cs-BB for pgsql-admin@lists.postgresql.org; Mon, 19 Dec 2022 19:11:20 +0000 Received: by mail-qt1-x831.google.com with SMTP id j16so9094793qtv.4 for ; Mon, 19 Dec 2022 11:11:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=in-reply-to:from:references:to:content-language:subject:user-agent :mime-version:date:message-id:from:to:cc:subject:date:message-id :reply-to; bh=3oPUKTbD5OiCrtXXxX2xMRz7r/pyK5Mnu2L71buijTo=; b=K9HshxQ80IJl/0rBJKxUGAQUZUNSlT/MNCvDq/DQ+1REeGVIyMdRGXNDXgYr44Tolc FoPnLGkeIdi00Ue7A+zaWtNddCKQzvNPP3X82P0VHTOJB2mHJt2iyRp2qMGFhPo335bC yZzEfMZQxGpG7sD88CzuCdHEq2DvLCaLdTZNQABNT+KCTzXkIOpmHHkysXAxsl2vTmDJ fcXc671KMnB1lqPRcrAitLnFp02ycIgWmaspXTp2+Rd0gdh3QFI+u5ly4OwpTgGLHwGf GQvnP8IAbMZH4vs9CuqhjakO8qAgn1WCThM/5NR0JStsKncKPo7805/hMYffMCAD5YIV 9k3A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=in-reply-to:from:references:to:content-language:subject:user-agent :mime-version:date:message-id:x-gm-message-state:from:to:cc:subject :date:message-id:reply-to; bh=3oPUKTbD5OiCrtXXxX2xMRz7r/pyK5Mnu2L71buijTo=; b=tALh/FDhUgCxax4ZzWDUcBX6V26xsn4YrDo4TZsbg87sciXOwVs6L1KQATPjcjLyH8 uVCaIrAp8OF04qtDCyvLi92It/c7qkEICqp0nnRoV6pcgFz81WO0C06OAFChqbslkmlS 4gQ3A/0Qtp1v47FKfEPT5fAayG12vk1ca+H3e78xsZIpxkLFZGsZyfc6tqiMlP3bnEaA JNJ8qjdNwHCCBp31vOdp7qE+C+tN08iY5KY2XDa1NHiXr0HYr5vqXSdDscsfQ7WKg/qO 5qqkTOBSYByGdnuWJyrycnoQMXf0fU+A6K2q5gQQWBz5SwKhZD5b9BN0pf7XPUY5q4I2 sBvA== X-Gm-Message-State: AFqh2kqRMmbFDjR4fjax6GYYTiiu6UP0fYyJqesdA/Pfrbj5vr0bXJGc MFjjKx4RCbweqMkJe2eLA3y7b50S6cqLxw== X-Google-Smtp-Source: AMrXdXtLl2+hSeWOPdo3H3ClCdL1c4kqhy9fsGs/kG2jgPHu0lgJ8qIIr5lF8mebj4OhrBVPOym6ig== X-Received: by 2002:a05:622a:1c0f:b0:3a9:8901:6022 with SMTP id bq15-20020a05622a1c0f00b003a989016022mr7068809qtb.61.1671477077703; Mon, 19 Dec 2022 11:11:17 -0800 (PST) Received: from [192.168.1.66] (108-250-206-84.lightspeed.nworla.sbcglobal.net. [108.250.206.84]) by smtp.googlemail.com with ESMTPSA id x20-20020a05620a449400b006eef13ef4c8sm7698684qkp.94.2022.12.19.11.11.17 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 19 Dec 2022 11:11:17 -0800 (PST) Content-Type: multipart/alternative; boundary="------------Z78uuSiNEmUnrXr7TimksOwy" Message-ID: <77d25a4d-e331-c75c-da4d-245651a934cd@gmail.com> Date: Mon, 19 Dec 2022 13:11:16 -0600 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.2.2 Subject: Re: Using pgadmin as an OAuth2 proxy for PostgreSQL Content-Language: en-US To: pgsql-admin@lists.postgresql.org References: <13f5e9d02dcf428b8e6fe25274ab6a1c@nordlb.de> <63e54f32-14cb-6f77-02b2-d42f094b45c9@gmail.com> From: Ron In-Reply-To: List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk This is a multi-part message in MIME format. --------------Z78uuSiNEmUnrXr7TimksOwy Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Why am I not surprised? On 12/19/22 09:17, Samed YILDIRIM wrote: > Hi Tobias, Ron, > > On Mon, 19 Dec 2022 at 16:50, Ron wrote: > > Why not authenticate Postgresql users directly to AD using GSSAPI? > > > Despite its name, Azure AD is not an Active Directory. It doesn't support > LDAP and Kerberos out of box. > -- Angular momentum makes the world go 'round. --------------Z78uuSiNEmUnrXr7TimksOwy Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit Why am I not surprised?

On 12/19/22 09:17, Samed YILDIRIM wrote:
Hi Tobias, Ron,

On Mon, 19 Dec 2022 at 16:50, Ron <ronljohnsonjr@gmail.com> wrote:
Why not authenticate Postgresql users directly to AD using GSSAPI?

Despite its name, Azure AD is not an Active Directory. It doesn't support LDAP and Kerberos out of box.


--
Angular momentum makes the world go 'round.
--------------Z78uuSiNEmUnrXr7TimksOwy--