public inbox for [email protected]  

help / color / mirror / Atom feed

From: Stephen Frost <[email protected]>
To: Andrej <[email protected]>
Cc: Heckler, Kim M <[email protected]>
Cc: [email protected] <[email protected]>
Subject: Re: Password aging
Date: Wed, 5 Feb 2020 15:39:21 -0500
Message-ID: <[email protected]> (raw)
In-Reply-To: <CACMx3pPt-2EGd=X3=jKmNFNWe6rHYX79rOWKGS7U4cmviUzi8Q@mail.gmail.com>
References: <CH2PR07MB666342130A55D05274D46D1E86020@CH2PR07MB6663.namprd07.prod.outlook.com>
	<CACMx3pPt-2EGd=X3=jKmNFNWe6rHYX79rOWKGS7U4cmviUzi8Q@mail.gmail.com>

Greetings,

* Andrej ([email protected]) wrote:
> I'm not aware of any such extension; but similar questions were asked in
> the past, and the common (and IMHO sensible) response is to tie postgres
> authentication into an external authentication provider, e.g. LDAP

I agree with the idea of tying PG to an external authentication
provider, but I strongly recommend to use GSSAPI and *not* LDAP, as LDAP
based auth is insecure and not needed when you're running an Active
Directory environment (which is a very common use-case that people
have in many places).

Thanks,

Stephen


Attachments:

  [application/pgp-signature] signature.asc (819B, ../[email protected]/2-signature.asc)
  download

view thread (4+ messages)  latest in thread

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected], [email protected]
  Subject: Re: Password aging
  In-Reply-To: <[email protected]>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox