pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  
help / color / mirror / Atom feed
From: Sathesh S <sathesh.sundaram@hotmail.com>
To: pgsql-admin@postgresql.org <pgsql-admin@postgresql.org>
Subject: Disable /Suppress hostname checks while secured LDAP
Date: Wed, 14 Feb 2018 06:57:32 +0000
Message-ID: <DB6PR10MB1846529979DDF09DE728FE2D82F50@DB6PR10MB1846.EURPRD10.PROD.OUTLOOK.COM> (raw)

Hello All,

Is there a way to disable/suppress hostname checks in while using Secured LDAP in postgreSQL for authentication.

The issue what we have is that the LDAP certificate what we are using is working for fully qualified named of the domain but not when we use a direct LDAP server in the pg_ba.conf file.

For example:
This works - ldapserver="ldaps//dummy.company.com"

This doesnt work - ldapserver="server1.dummy.company.com"

Our internal LDAP team says that we nees to disable/suppress the hostname checking on the postgreSQL side for the 2nd option to work.

Does anyone have an idea on how we can suppress hostnames check while using Secured LDAP.

Thanks ,
Sathesh

view thread (6+ messages)  latest in thread

Message-ID: <DB6PR10MB1846529979DDF09DE728FE2D82F50@DB6PR10MB1846.EURPRD10.PROD.OUTLOOK.COM>
Permalink:  ../DB6PR10MB1846529979DDF09DE728FE2D82F50@DB6PR10MB1846.EURPRD10.PROD.OUTLOOK.COM/
Also on:    postgresql.org/message-id/DB6PR10MB1846529979DDF09DE728FE2D82F50@DB6PR10MB1846.EURPRD10.PROD.OUTLOOK.COM

 · 

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-admin@postgresql.org
  Cc: sathesh.sundaram@hotmail.com
  Subject: Re: Disable /Suppress hostname checks while secured LDAP
  In-Reply-To: <DB6PR10MB1846529979DDF09DE728FE2D82F50@DB6PR10MB1846.EURPRD10.PROD.OUTLOOK.COM>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox