From: Tilman Koschnick <til+pg@subnetz.org>
To: pgsql-admin@lists.postgresql.org
Subject: applicable mapping for clientcert=verify-full
Date: Thu, 11 Mar 2021 21:06:25 +0100
Message-ID: <f4677bbd8f990c53739043b8feabc69162540e64.camel@subnetz.org> (raw)
Hi,
I'd like to combine password authentication with the clientcert=verify-
full option. According to the documentation, this would enforce that
the "cn ... matches the username or an applicable mapping".
If I try to specify the mapping by setting the map= option, I get the
following error:
authentication option "map" is only valid for authentication methods
ident, peer, gssapi, sspi, and cert
How do I specify the applicable mapping in that case?
Kind regards, Til
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: til+pg@subnetz.org, pgsql-admin@lists.postgresql.org
Subject: Re: applicable mapping for clientcert=verify-full
In-Reply-To: <f4677bbd8f990c53739043b8feabc69162540e64.camel@subnetz.org>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox