From: Anjul Tyagi <anjul@ibosstech-us.com>
To: pgsql-admin <pgsql-admin@postgresql.org>
Subject: LDAP Configuration
Date: Wed, 01 Apr 2020 10:29:35 +0000
Message-ID: <em62afb13f-e34b-48c8-8500-7edfd179a57b@iboss01108> (raw)
Team,
we are implementing the LDAP authentication and we are able to connect
with LDAP and able to authenticate the user with that. However we have 2
type of users, one - corporate users and available of Active Directory
and second application user, which is used by different application to
connect with database.
Below entry i did in the pg_hba.conf file, if i create user in DB
(similar exist on AD) it works. However if i create one user with
password, it calls the LDAP server for authentication and fails as it
does not exists in AD.
host all all 0.0.0.0/0 ldap
ldapserver=<LDAL Server> ldapbasedn="OU=Corporate,DC=etch,dc=com"
ldapbinddn="CN=AdSyncAcct,OU=Service Accounts,DC=etch,DC=com"
ldapbindpasswd="Password" ldapsearchattribute="sAMAccountName"
we are using the postgres 10.10 version.
can you please suggest the pg_hba.conf file entry, that will help us to
authenticate the users from LDAP and from postgres as well.
Regards,
Anjul TYAGI
ΓΌ Go Green
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: anjul@ibosstech-us.com
Subject: Re: LDAP Configuration
In-Reply-To: <em62afb13f-e34b-48c8-8500-7edfd179a57b@iboss01108>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox