From: Paul Förster <paul.foerster@gmail.com>
To: Ron <ronljohnsonjr@gmail.com>
Cc: Pgsql-admin <pgsql-admin@lists.postgresql.org>
Subject: Re: LDAP and roles
Date: Wed, 9 Dec 2020 09:50:46 +0100
Message-ID: <7B771DE2-88C4-421A-84B3-5016496DCA5B@gmail.com> (raw)
In-Reply-To: <487c76f4-185c-b712-2d22-a6e6e9b86c6b@gmail.com>
References: <487c76f4-185c-b712-2d22-a6e6e9b86c6b@gmail.com>
Hi Ron,
> On 08. Dec, 2020, at 21:12, Ron <ronljohnsonjr@gmail.com> wrote:
>
> Does LDAP obviate the need for the PASSWORD clause of CREATE ROLE?
yes, it does. We use it all the time.
create role <name> login;
grant <approle> to name;
It works with us this way. The user/role is otherwise completely managed in LDAP, including password policies, etc.
Cheers,
Paul
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: paul.foerster@gmail.com, ronljohnsonjr@gmail.com, pgsql-admin@lists.postgresql.org
Subject: Re: LDAP and roles
In-Reply-To: <7B771DE2-88C4-421A-84B3-5016496DCA5B@gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox