From: Holger Jakobs <holger@jakobs.com>
To: pgsql-admin@lists.postgresql.org,Ilya Kosmodemiansky <hydrobiont@gmail.com>
To: Pierre Ochsenbein <pierreochsenbein@gmail.com>
Cc: pgsql-admin <pgsql-admin@postgresql.org>
Subject: Re: LDAP security connection
Date: Sat, 13 Apr 2019 07:13:25 +0200
Message-ID: <CCAECF26-4EC2-445D-B26F-7A01E3F6968D@jakobs.com> (raw)
In-Reply-To: <CABvo6pRUMdPd949GZwD+ebRLvPmvtziQOYh2_5tQAwxyU5B4oQ@mail.gmail.com>
References: <CABG8FoODHypeaHHotSKhtK294UJ3mxhAK-qm2O0sAyDA176=RA@mail.gmail.com>
<CABvo6pRUMdPd949GZwD+ebRLvPmvtziQOYh2_5tQAwxyU5B4oQ@mail.gmail.com>
If you run PostgreSQL on Windows (don't know whether and how it works on other OS), writing sspi instead of md5 in pg_hba.conf is sufficient to connect it to Active Directory.
Add a pg_ident file to match PG users with AD users an you are done.
Regards,
Holger
Am 12. April 2019 10:17:52 MESZ schrieb Ilya Kosmodemiansky <hydrobiont@gmail.com>:
>Hi Pierre
>
>in general, there is nothing too complicated -
>https://www.postgresql.org/docs/11/auth-ldap.html because LDAP is just
>an authentication method.
>
>Details could be more tricky, but for that more details on your
>requirements needed - do you use pgbouncer, do you need to sync roles
>from AD etc.
>
>best regards,
>Ilya
>
>On Fri, Apr 12, 2019 at 9:58 AM Pierre Ochsenbein
><pierreochsenbein@gmail.com> wrote:
>>
>> Dear community
>>
>> I would like to create a connection security to PostgreSQL from
>Active Directory with auth LDAP.
>> Have you some recommendation for make this steps?
>>
>> Have a great Friday
>>
>>
--
Holger Jakobs, Bergisch Gladbach
+49 178 9759012
- sent from mobile, therefore short -
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: holger@jakobs.com, hydrobiont@gmail.com, pierreochsenbein@gmail.com
Subject: Re: LDAP security connection
In-Reply-To: <CCAECF26-4EC2-445D-B26F-7A01E3F6968D@jakobs.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox