Content-Type: multipart/alternative;
 boundary="------------OvveDvcllP0bv7ouB3EDQMhd"
Message-ID: <83c50b58-a8a7-4526-85db-fecc649aa561@cloud.gatewaynet.com>
Date: Fri, 20 Dec 2024 10:32:54 +0200
MIME-Version: 1.0
Subject: Re: How To Configure PostgreSQL to Use LDAP for Authentication
To: pgsql-admin@lists.postgresql.org
References: 
 <CABHPps4FeMPPqm36+SnhW67HKd=f1wcsZGxES6w=Ay6O5YQKNQ@mail.gmail.com>
Content-Language: en-US
From: Achilleas Mantzios - cloud <a.mantzios@cloud.gatewaynet.com>
In-Reply-To: 
 <CABHPps4FeMPPqm36+SnhW67HKd=f1wcsZGxES6w=Ay6O5YQKNQ@mail.gmail.com>
Archived-At: 
 <https://www.postgresql.org/message-id/83c50b58-a8a7-4526-85db-fecc649aa561%40cloud.gatewaynet.com>
Precedence: bulk

This is a multi-part message in MIME format.
--------------OvveDvcllP0bv7ouB3EDQMhd
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit


On 12/6/24 16:15, Henry Ashu wrote:
> Hi,
>
> Please, I need help with how to configure postgresql to use LDAP for 
> Authentication.
> *
> *
> *Here is what I have tried;*
>
> host all all 0.0.0.0/0 <http://0.0.0.0/0> ldap 
> ldapserver=ldap://adserver.domain.com <http://adserver.domain.com> 
> ldapport=389 ldapprefix="DOMAIN\" ldapsuffix="" 
> ldapbinddn=postgres-user@domain.com ldapbindpasswd=mypassword
>
>
> host    all             all 0.0.0.0/0 <http://0.0.0.0/0>         ldap 
>        ldapurl="ldaps://adserver.domain.com:636 
> <http://adserver.domain.com:636>" ldapbasedn="OU=Users,OU=England 
> 053,OU=Commercial Services,DC=domain,DC=com" 
> ldapbinddn="postgres-user@domain.com" ldapbindpasswd="mypassword" 
> ldapsearchattribute="OU=Users,OU=England 053,OU=Commercial 
> Services,DC=domain,DC=com"
>
>
>
> host    all             all 0.0.0.0/0 <http://0.0.0.0/0>         ldap 
>         ldapserver="adserver.domain.com <http://adserver.domain.com>" 
>     ldapport=636     ldapscheme="ldaps" 
> ldapbasedn="OU=Users,OU=England 053,OU=Commercial 
> Services,DC=domain,DC=com"     ldapbinddn="OU=Users,OU=England 
> 053,OU=Commercial Services,DC=domain,DC=com" 
> ldapbindpasswd="mypassword" ldapsearchattribute="adservice-account"
>
> *
> *
> *And this is the error I'm getting;*
>
> [postgres@myserver ~]$ psql -U myuser mydatabase
> psql: error: connection to server on socket 
> "/run/postgresql/.s.PGSQL.5432" failed: FATAL:  no pg_hba.conf entry 
> for host "[local]", user "myuser", database "mydatabase", no encryption
> [postgres@myserver ~]$ psql -U "MYDOMAIN\myuser" mydatabase
> psql: error: connection to server on socket 
> "/run/postgresql/.s.PGSQL.5432" failed: FATAL:  no pg_hba.conf entry 
> for host "[local]", user "MYDOMAIN\myuser", database "mydatabase", no 
> encryption
Fix your pg_hba.conf, LDAP is the least of your problems.
>
> Thank you
>
> *Henry Ashu*
>
> Database Administrator
> *o:* 503.672.5114 | *f:* 800.551.8821 | DAT.com
>
> DAT Solutions <https://www.dat.com/> Like us on Facebook 
> <https://www.facebook.com/loadboards> Follow us on Twitter 
> <https://twitter.com/loadboards> Connect with us on LinkedIn 
> <https://www.linkedin.com/company/datsolutions> Visit our YouTube 
> Channel <https://www.youtube.com/datloadboards> Visit us on Instagram 
> <https://instagram.com/dat_solutions>
--------------OvveDvcllP0bv7ouB3EDQMhd
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit

<!DOCTYPE html>
<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <p><br>
    </p>
    <div class="moz-cite-prefix">On 12/6/24 16:15, Henry Ashu wrote:<br>
    </div>
    <blockquote type="cite"
cite="mid:CABHPps4FeMPPqm36+SnhW67HKd=f1wcsZGxES6w=Ay6O5YQKNQ@mail.gmail.com">
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <div dir="ltr">
        <div>Hi,</div>
        <div><br>
        </div>
        <div>Please, I need help with how to configure postgresql to use
          LDAP for Authentication. </div>
        <div><b><br>
          </b></div>
        <div><b>Here is what I have tried;</b></div>
        <div><br>
        </div>
        <div>host all all <a href="http://0.0.0.0/0"
            moz-do-not-send="true">0.0.0.0/0</a> ldap ldapserver=ldap://<a
            href="http://adserver.domain.com" moz-do-not-send="true">adserver.domain.com</a>
          ldapport=389 ldapprefix="DOMAIN\" ldapsuffix="" ldapbinddn=<a
            href="mailto:postgres-user@domain.com"
            moz-do-not-send="true" class="moz-txt-link-freetext">postgres-user@domain.com</a>
          ldapbindpasswd=mypassword<br>
          <br>
          <br>
          host    all             all             <a
            href="http://0.0.0.0/0" moz-do-not-send="true">0.0.0.0/0</a>
                  ldap        ldapurl="ldaps://<a
            href="http://adserver.domain.com:636" moz-do-not-send="true">adserver.domain.com:636</a>"
          ldapbasedn="OU=Users,OU=England 053,OU=Commercial
          Services,DC=domain,DC=com" ldapbinddn="<a
            href="mailto:postgres-user@domain.com"
            moz-do-not-send="true" class="moz-txt-link-freetext">postgres-user@domain.com</a>"
          ldapbindpasswd="mypassword"
          ldapsearchattribute="OU=Users,OU=England 053,OU=Commercial
          Services,DC=domain,DC=com"<br>
          <br>
          <br>
          <br>
          host    all             all             <a
            href="http://0.0.0.0/0" moz-do-not-send="true">0.0.0.0/0</a>
                  ldap         ldapserver="<a
            href="http://adserver.domain.com" moz-do-not-send="true">adserver.domain.com</a>"
              ldapport=636     ldapscheme="ldaps"    
          ldapbasedn="OU=Users,OU=England 053,OU=Commercial
          Services,DC=domain,DC=com"     ldapbinddn="OU=Users,OU=England
          053,OU=Commercial Services,DC=domain,DC=com"    
          ldapbindpasswd="mypassword"    
          ldapsearchattribute="adservice-account"<br>
        </div>
        <div><br>
        </div>
        <div><b><br>
          </b></div>
        <div><b>And this is the error I'm getting;</b></div>
        <div><br>
        </div>
        <div>[postgres@myserver ~]$ psql -U myuser mydatabase<br>
          psql: error: connection to server on socket
          "/run/postgresql/.s.PGSQL.5432" failed: FATAL:  no pg_hba.conf
          entry for host "[local]", user "myuser", database
          "mydatabase", no encryption<br>
          [postgres@myserver ~]$ psql -U "MYDOMAIN\myuser" mydatabase<br>
          psql: error: connection to server on socket
          "/run/postgresql/.s.PGSQL.5432" failed: FATAL:  no pg_hba.conf
          entry for host "[local]", user "MYDOMAIN\myuser", database
          "mydatabase", no encryption<br>
        </div>
      </div>
    </blockquote>
    Fix your pg_hba.conf, LDAP is the least of your problems.<br>
    <blockquote type="cite"
cite="mid:CABHPps4FeMPPqm36+SnhW67HKd=f1wcsZGxES6w=Ay6O5YQKNQ@mail.gmail.com">
      <div dir="ltr">
        <div>
          <div dir="ltr" class="gmail_signature"
            data-smartmail="gmail_signature">
            <div dir="ltr">
              <p
style="color:rgb(0,0,0);font-family:Gotham,&quot;Helvetica Neue&quot;,Helvetica,Arial,sans-serif;font-size:0.8rem;line-height:1.2rem"><span
                  style="font-size:0.9rem;color:rgb(51,51,51)">Thank you</span></p>
              <p
style="color:rgb(0,0,0);font-family:Gotham,&quot;Helvetica Neue&quot;,Helvetica,Arial,sans-serif;font-size:0.8rem;line-height:1.2rem"><strong
                  style="font-size:0.9rem;color:rgb(51,51,51)">Henry
                  Ashu</strong><br>
              </p>
              <p
style="color:rgb(0,0,0);font-family:Gotham,&quot;Helvetica Neue&quot;,Helvetica,Arial,sans-serif;font-size:0.8rem;line-height:1.2rem"><span
                  style="color:rgb(102,102,102)">Database Administrator<br>
                  <strong>o:</strong> 503.672.5114 <span
                    style="color:rgb(147,149,152)">|</span> <strong>f:</strong> 800.551.8821 <span
                    style="color:rgb(147,149,152)">|</span> DAT.com</span></p>
              <div
style="color:rgb(0,0,0);font-family:&quot;Times New Roman&quot;;font-size:medium"><a
                  href="https://www.dat.com/" target="_blank"
                  moz-do-not-send="true"><img
src="https://www.dat.com/site/assets/media/images/global/emails/signature/dat-logo.png"
                    alt="DAT Solutions" width="70" height="20"
                    moz-do-not-send="true"></a>    <a
                  href="https://www.facebook.com/loadboards"
                  target="_blank" moz-do-not-send="true"><img
src="https://www.dat.com/site/assets/media/images/global/emails/signature/social-fb.png"
                    alt="Like us on Facebook" width="20" height="20"
                    moz-do-not-send="true"></a>  <a
                  href="https://twitter.com/loadboards" target="_blank"
                  moz-do-not-send="true"><img
src="https://www.dat.com/site/assets/media/images/global/emails/signature/social-tw.png"
                    alt="Follow us on Twitter" width="20" height="20"
                    moz-do-not-send="true"></a>  <a
                  href="https://www.linkedin.com/company/datsolutions"
                  target="_blank" moz-do-not-send="true"><img
src="https://www.dat.com/site/assets/media/images/global/emails/signature/social-li.png"
                    alt="Connect with us on LinkedIn" width="20"
                    height="20" moz-do-not-send="true"></a>  <a
                  href="https://www.youtube.com/datloadboards"
                  target="_blank" moz-do-not-send="true"><img
src="https://www.dat.com/site/assets/media/images/global/emails/signature/social-yt.png"
                    alt="Visit our YouTube Channel" width="20"
                    height="20" moz-do-not-send="true"></a>  <a
                  href="https://instagram.com/dat_solutions"
                  target="_blank" moz-do-not-send="true"><img
src="https://www.dat.com/site/assets/media/images/global/emails/signature/social-ig.png"
                    alt="Visit us on Instagram" width="20" height="20"
                    moz-do-not-send="true"></a></div>
            </div>
          </div>
        </div>
      </div>
    </blockquote>
  </body>
</html>

--------------OvveDvcllP0bv7ouB3EDQMhd--