Date: Sat, 13 Apr 2019 07:13:25 +0200
User-Agent: K-9 Mail for Android
In-Reply-To: 
 <CABvo6pRUMdPd949GZwD+ebRLvPmvtziQOYh2_5tQAwxyU5B4oQ@mail.gmail.com>
References: 
 <CABG8FoODHypeaHHotSKhtK294UJ3mxhAK-qm2O0sAyDA176=RA@mail.gmail.com>
 <CABvo6pRUMdPd949GZwD+ebRLvPmvtziQOYh2_5tQAwxyU5B4oQ@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain;
 charset=utf-8
Content-Transfer-Encoding: quoted-printable
Subject: Re: LDAP security connection
To: pgsql-admin@lists.postgresql.org,Ilya Kosmodemiansky
 <hydrobiont@gmail.com>,Pierre Ochsenbein <pierreochsenbein@gmail.com>
CC: pgsql-admin <pgsql-admin@postgresql.org>
From: Holger Jakobs <holger@jakobs.com>
Message-ID: <CCAECF26-4EC2-445D-B26F-7A01E3F6968D@jakobs.com>
Precedence: bulk

If you run PostgreSQL on Windows (don't know whether and how it works on ot=
her OS), writing sspi instead of md5 in pg_hba=2Econf is sufficient to conn=
ect it to Active Directory=2E

Add a pg_ident file to match PG users with AD users an you are done=2E

Regards,
Holger

Am 12=2E April 2019 10:17:52 MESZ schrieb Ilya Kosmodemiansky <hydrobiont@=
gmail=2Ecom>:
>Hi Pierre
>
>in general, there is nothing too complicated -
>https://www=2Epostgresql=2Eorg/docs/11/auth-ldap=2Ehtml because LDAP is j=
ust
>an authentication method=2E
>
>Details could be more tricky, but for that more details on your
>requirements needed - do you use pgbouncer, do you need to sync roles
>from AD etc=2E
>
>best regards,
>Ilya
>
>On Fri, Apr 12, 2019 at 9:58 AM Pierre Ochsenbein
><pierreochsenbein@gmail=2Ecom> wrote:
>>
>> Dear community
>>
>> I would like to create a connection security to PostgreSQL from
>Active Directory with auth LDAP=2E
>> Have you some recommendation for make this steps?
>>
>> Have a great Friday
>>
>>

--=20
Holger Jakobs, Bergisch Gladbach
+49 178 9759012
- sent from mobile, therefore short -