From: xujian <jamesxu@outlook.com>
To: pgsql-admin@postgresql.org <pgsql-admin@postgresql.org>
Subject: Re: Postgresql gss user map doesn't work
Date: Tue, 30 Jun 2015 17:37:55 -0400
Message-ID: <BAY181-W67BE66578274EEDB49C47DA1A90@phx.gbl> (raw)
In-Reply-To: <BAY181-W52A150EEDDA570E26EF525A1A90@phx.gbl>
References: <BAY181-W2789FFC24FB9CF9A3A86A8A1A90@phx.gbl>
<BAY181-W52A150EEDDA570E26EF525A1A90@phx.gbl>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-admin>
it looks like I need to specify the mapping user name in the command, for instance, if my credential is xxx, I want to login as user company_com_xxx, I have to run command like
/psql -d dbname -h postgresql.server.name -U company_com_xxx
but why I need to specify the mapping user name company_com_xxx in command line? does anyone have same issue? thanks
JamesFrom: jamesxu@outlook.com
To: pgsql-admin@postgresql.org
Subject: Postgresql gss user map doesn't work
Date: Tue, 30 Jun 2015 12:56:47 -0400
Hello, I have a problem when I am using gss map. I want to map the user xxx@company.com to db role company_com_xxxhere is my pa_hba.conf:=================# TYPE DATABASE USER ADDRESS METHODhost all all all gss include_realm=1 map=mymap
here is the pg_ident.conf=================# MAPNAME SYSTEM-USERNAME PG-USERNAMEmymap /(.*)@COMPANY.COM company_com_\1
However, it doesn't work, I got error message=================LOG: no match in usermap "mymap" for user "xxx" authenticated as "xxx@COMPANY.COM"FATAL: GSSAPI authentication failed for user "xxx"DETAIL: Connection matched pg_hba.conf line 88: "host all all all gss include_realm=1 map=mymap"
but if I changed the map to =================# MAPNAME SYSTEM-USERNAME PG-USERNAMEmymap /(.*)@COMPANY.COM \1
then I can login, I have created role xxx and company_com_xxx in db side. even if I hard code the username in the mapping like=================# MAPNAME SYSTEM-USERNAME PG-USERNAMEmymap /(.*)@COMPANY.COM company_com_xxx
it still doesn't work. any idea?
Thanks in advance!
James
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: jamesxu@outlook.com
Subject: Re: Postgresql gss user map doesn't work
In-Reply-To: <BAY181-W67BE66578274EEDB49C47DA1A90@phx.gbl>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox