Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dg0Hd-00005B-75 for pgsql-admin@arkaria.postgresql.org; Fri, 11 Aug 2017 03:06:45 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.84_2) (envelope-from ) id 1dg0Hc-0007Ma-Q5 for pgsql-admin@arkaria.postgresql.org; Fri, 11 Aug 2017 03:06:44 +0000 Received: from makus.postgresql.org ([2001:4800:1501:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1dg0Fo-0002zs-Ac for pgsql-admin@postgresql.org; Fri, 11 Aug 2017 03:04:52 +0000 Received: from out2-smtp.messagingengine.com ([66.111.4.26]) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1dg0Fl-0005Jq-Jz for pgsql-admin@postgresql.org; Fri, 11 Aug 2017 03:04:51 +0000 Received: from compute7.internal (compute7.nyi.internal [10.202.2.47]) by mailout.nyi.internal (Postfix) with ESMTP id 154052085B; Thu, 10 Aug 2017 23:04:49 -0400 (EDT) Received: from frontend2 ([10.202.2.161]) by compute7.internal (MEProxy); Thu, 10 Aug 2017 23:04:49 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-sender:x-me-sender:x-sasl-enc:x-sasl-enc; s= fm1; bh=6ggc5l+LOM3Tc8hJfdpUWNwmQy9PbgHRx5Ay4dYEC1s=; b=WWh5QQCc 16eOkdol1EVaWVoS2kMu15BdsYe5jTG6U6Eqp18Mh4PFIc3QYL0UkCOeFaotNuCi DnHHVajXpt2gZZW/l8vixveiAHtLVsCYztvjvvXO7JT5winqcOfA9bdVEYUV0v2x 4PItuVNIRulQrNeAjVdB8XBUeE4NcOvwo9DYTSofpZxqbl1ol6pUJwSWiDjL1Zn3 WuLaS9eVCvN1lGVIZGYsm8XRwA6ep1m1EHYjtMxLVuuHyTm2tszILyrOh7Qwy/5J iNRsCeonzWhMf6ZiMOPNIlRnLbF1C3vSzFD0011yj+U1yHWXGKu+l1asvN4CDLQn pqWXlYFySZSJjg== X-ME-Sender: X-Sasl-enc: KXH88tRrUifTr7YWzTsreWAb0fYl0dZp29FinrvoSh5D 1502420688 Received: from april.local (c-73-13-66-39.hsd1.pa.comcast.net [73.13.66.39]) by mail.messagingengine.com (Postfix) with ESMTPA id AD8B6240A4; Thu, 10 Aug 2017 23:04:48 -0400 (EDT) Subject: Re: Postgres user authentication with secure LDAP To: "Tang, Ronald K CIV FNMOC, N6" , "pgsql-admin@postgresql.org" References: From: Peter Eisentraut Organization: 2ndQuadrant Message-ID: Date: Thu, 10 Aug 2017 23:04:48 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.2.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-admin Precedence: bulk Sender: pgsql-admin-owner@postgresql.org On 8/10/17 17:02, Tang, Ronald K CIV FNMOC, N6 wrote: > I am trying to configure my Postgres server to use LDAP for authentication. My pg_hba.conf config line is: > > ldap ldapserver=ldaps://myldaps.company.com ldapport=636 ldaptls=1 ldapprefix="uid=" ldapsuffix=",ou=People,o=my.company.com" The ldapserver= attribute takes a host name, not a URL. -- Peter Eisentraut http://www.2ndQuadrant.com/ PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services -- Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-admin