Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kmvJn-0000VJ-HI for pgsql-admin@arkaria.postgresql.org; Wed, 09 Dec 2020 08:59:27 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1kmvBT-0007rA-V4 for pgsql-admin@arkaria.postgresql.org; Wed, 09 Dec 2020 08:50:51 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kmvBT-0007r3-Lb for pgsql-admin@lists.postgresql.org; Wed, 09 Dec 2020 08:50:51 +0000 Received: from mail-ej1-x62e.google.com ([2a00:1450:4864:20::62e]) by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1kmvBR-0008Eq-DD for pgsql-admin@lists.postgresql.org; Wed, 09 Dec 2020 08:50:50 +0000 Received: by mail-ej1-x62e.google.com with SMTP id ga15so963506ejb.4 for ; Wed, 09 Dec 2020 00:50:49 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=1r4atAbC7JpebxCNiSPN8cdlLXoEhiZR3RuOQR6JdAo=; b=nGrjLScfcexEwDRJjANcSn5afrHs3DT//xDMUdNL1sOsqNl3xLocXxIijoIXdfqrGN UiEHETkiPz+zvPuID/4F0x6xRqz5IvvuFvw+HElLN2jXI/frkTXWeJZ6KSIWwrTzuz/G VI6Lc2tI5B/3I5gF/6jKELQ0pzL08BqJtt+NUsy709c4kQhowek52qe35a7KBGzOub/J 5ssYEBZNQnD8HSlu8TdjAmZJeBWtvurSl/qPX5VN/RiO4h/2TL43QQb1Jp1EBkbSFck6 golrqhsa7HlIMmcf5FjIzPy5XBCHdxWWbAWS4pV6aBM5ZUpF1yQ6GEhyiM3qjmbrD8lN X5zQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=1r4atAbC7JpebxCNiSPN8cdlLXoEhiZR3RuOQR6JdAo=; b=MLW1q5k8KNy9Ot0tJ5G9Ckg05MeEMB9/nzd3oj7zDOeyc+z7q6KeprFcIAFRCg6/of fU7pkhphXX5F6wdAjHBPhiNlDtHXMMWA9cJMr4+OK2dn4TEAjKtrT3wmrz+pRe6AsLeK 8S+cU42hPBrYpiO+yKf9O3+6JsYCdj9PkVFOuUaxY7uSIR9oXknmOyRJB9/sYheGxtxX xWyY46Q/i0X/3q0sfkccVRbI6mc+IhKtkyMETSrRbjDzsN7vfg3aVbel0/Z29FEiTu/q OHC+SI1z/F5tAIJxu1rJDB96H0N4Lsqxq9P55TkBw2AiCAkaGxT9wAiOEQbOOl+iJELf pAig== X-Gm-Message-State: AOAM531xUQR0+wfgRKTWdyqyr+uXWVLr0BrH+5b0lC2q5g8tPC7tpnmZ rmbGJ0GxkQWy14GlBTcF+nk= X-Google-Smtp-Source: ABdhPJwH1unWCIAFRd87PkoT8UzANjarp/xoRl/CZ3hRlV75/km2Wu6qgE5nKpL6tKKLUPZAuK/rSg== X-Received: by 2002:a17:906:718b:: with SMTP id h11mr1147793ejk.241.1607503848088; Wed, 09 Dec 2020 00:50:48 -0800 (PST) Received: from [192.168.1.145] (241-57-239-77.dyn.cable.fcom.ch. [77.239.57.241]) by smtp.gmail.com with ESMTPSA id e11sm875429edj.44.2020.12.09.00.50.47 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Wed, 09 Dec 2020 00:50:47 -0800 (PST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.20.0.2.21\)) Subject: Re: LDAP and roles From: =?utf-8?Q?Paul_F=C3=B6rster?= In-Reply-To: <487c76f4-185c-b712-2d22-a6e6e9b86c6b@gmail.com> Date: Wed, 9 Dec 2020 09:50:46 +0100 Cc: Pgsql-admin Content-Transfer-Encoding: quoted-printable Message-Id: <7B771DE2-88C4-421A-84B3-5016496DCA5B@gmail.com> References: <487c76f4-185c-b712-2d22-a6e6e9b86c6b@gmail.com> To: Ron X-Mailer: Apple Mail (2.3654.20.0.2.21) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk Hi Ron, > On 08. Dec, 2020, at 21:12, Ron wrote: >=20 > Does LDAP obviate the need for the PASSWORD clause of CREATE ROLE? yes, it does. We use it all the time. create role login; grant to name; It works with us this way. The user/role is otherwise completely managed = in LDAP, including password policies, etc. Cheers, Paul