From: Achilleas Mantzios <achill@matrix.gatewaynet.com>
To: pgsql-general@lists.postgresql.org
Subject: Re: integrate Postgres Users Authentication with our own LDAP Server
Date: Thu, 9 May 2019 09:17:37 +0300
Message-ID: <fe1f2926-60e8-5b76-85d8-5753b0ea8de8@matrix.gatewaynet.com> (raw)
In-Reply-To: <VI1PR0701MB2718F96CC2957625C3862F81AE330@VI1PR0701MB2718.eurprd07.prod.outlook.com>
References: <VI1PR0701MB2718F96CC2957625C3862F81AE330@VI1PR0701MB2718.eurprd07.prod.outlook.com>
On 9/5/19 7:51 π.μ., M Tarkeshwar Rao wrote:
>
> Hi all,
>
> We would need to integrate Postgres Users Authentication with our own LDAP Server.
>
> Basically as of now we are able to login to Postgress DB with a user/password credential.
>
> These user objects are the part of Postgres DB server. Now we want that these users should be authenticated by LDAP server.
>
> We would want the authentication to be done with LDAP, so basically the user credentials should be store in LDAP server
>
> Can you mention the prescribed steps in Postgres needed for this integration with LDAP Server?
>
The users must be existent as postgresql users. Authorization : roles, privileges etc also will be taken by postgresql definitions, grants, etc. But the authentication will be done in LDAP.
It is done in pg_hba.conf. There are two ways to do this (with 1 or 2 phases). We have successfully used both Lotus Notes LDAP and FreeIPA LDAP with our production PostgreSQL servers, I have tested
with openldap as well, so I guess chances are that it will work with yours.
>
> Regards
>
> Tarkeshwar
>
--
Achilleas Mantzios
IT DEV Lead
IT DEPT
Dynacom Tankers Mgmt
Attachments:
[image/png] image001.png (8.3K, ../fe1f2926-60e8-5b76-85d8-5753b0ea8de8@matrix.gatewaynet.com/3-image001.png)
download | view image
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-performance@postgresql.org
Cc: achill@matrix.gatewaynet.com, pgsql-general@lists.postgresql.org
Subject: Re: integrate Postgres Users Authentication with our own LDAP Server
In-Reply-To: <fe1f2926-60e8-5b76-85d8-5753b0ea8de8@matrix.gatewaynet.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox