BUG #16399: Ldap authentication bug

From: PG Bug reporting form <noreply(at)postgresql(dot)org>
To: pgsql-bugs(at)lists(dot)postgresql(dot)org
Cc: ciaranrh(at)gmail(dot)com
Subject: BUG #16399: Ldap authentication bug
Date: 2020-04-28 23:09:20
Message-ID: 16399-dc29bf26ef0563c1@postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

The following bug has been logged on the website:

Bug reference: 16399
Logged by: Ciaran
Email address: ciaranrh(at)gmail(dot)com
PostgreSQL version: 10.12
Operating system: Windows Server 2012
Description:

Hello,

Follow the documentation here:
https://www.postgresql.org/docs/10/auth-methods.html#AUTH-LDAP I'm
attempting to enable LDAP authentication on my postgres database.

The relevant line for my testing this in my pg_hba.conf file is as
follows:
host all ciaranh 0.0.0.0/0 ldap
ldapurl="ldap://<DC>/OU=IT,DC=CNFLTD,DC=COM?sAMAccountName?one"
#ldapbinddn="CN=Postgres Bind, OU=Service Accounts, DC=CNFLTD, DC=COM"
ldapbindpasswd="cnfP(at)ssw0rd"

I receive the following error when trying to start the postgres service:
2020-04-28 16:00:02.619 PDT [4704] LOG: authentication method "ldap"
requires argument "ldapserver" to be set
2020-04-28 16:00:02.619 PDT [4704] CONTEXT: line 79 of configuration file
"C:/Program Files/PostgreSQL/10/data/pg_hba.conf"
2020-04-28 16:00:02.619 PDT [4704] FATAL: could not load pg_hba.conf

I do not understand why the ldapserver need be set if it's specified in the
ldapurl field, this seems like a bug to me.

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message PG Bug reporting form 2020-04-29 02:17:04 BUG #16400: IN (query) allows for reference to column that doesn't exist
Previous Message Bruce Momjian 2020-04-28 17:45:57 Re: BUG #16380: documentation: host[no]gssenc vs. address/IP-address/IP-mask fields