Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mi4HJ-000875-Jv for pgsql-docs@arkaria.postgresql.org; Wed, 03 Nov 2021 00:37:21 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1mi4HI-0002Ox-Fx for pgsql-docs@arkaria.postgresql.org; Wed, 03 Nov 2021 00:37:20 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mi4HI-0002On-9I for pgsql-docs@lists.postgresql.org; Wed, 03 Nov 2021 00:37:20 +0000 Received: from momjian.us ([72.94.173.45]) by magus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mi4HB-0003q1-De for pgsql-docs@lists.postgresql.org; Wed, 03 Nov 2021 00:37:19 +0000 Received: from bruce by momjian.us with local (Exim 4.92) (envelope-from ) id 1mi4HA-0005pL-2f; Tue, 02 Nov 2021 20:37:12 -0400 Date: Tue, 2 Nov 2021 20:37:12 -0400 From: Bruce Momjian To: mcuccato.vts@gmail.com, pgsql-docs@lists.postgresql.org Subject: Re: ldapbindpasswd parameter value encrypted Message-ID: <20211103003712.GD17209@momjian.us> References: <163586230562.674.9567613689709556740@wrigleys.postgresql.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <163586230562.674.9567613689709556740@wrigleys.postgresql.org> User-Agent: Mutt/1.10.1 (2018-07-13) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Tue, Nov 2, 2021 at 02:11:45PM +0000, PG Doc comments form wrote: > The following documentation comment has been logged on the website: > > Page: https://www.postgresql.org/docs/12/auth-ldap.html > Description: > > Hello team, > may you please explain if there is a way to store in pg_hba.conf file the > value of parameter ldapbindpasswd crypted in some way? No, not really. This has a problem similar to encrypting pgpass, which I described here: https://momjian.us/main/blogs/pgblog/2021.html#May_28_2021 -- Bruce Momjian https://momjian.us EDB https://enterprisedb.com If only the physical world exists, free will is an illusion.