[Auth] "ident" method and LDAP user accounts

From: Stephane Bortzmeyer <bortzmeyer(at)nic(dot)fr>
To: pgsql-general(at)postgresql(dot)org
Subject: [Auth] "ident" method and LDAP user accounts
Date: 2005-03-02 14:43:13
Message-ID: 20050302144313.GA1531@generic-nic.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

I manage a Debian/Linux machine which runs PostgreSQL 7.4.7.

All the user accounts, including mine, are in a LDAP database. Thanks
to NSS (Name Service Switch) all applications have access to the LDAP
accounts (getpwuid(3) and getpwnam(3) use LDAP). But not PostgreSQL.

When I connect locally (Linux as SO_PEERCRED so the ident daemon is
not used) with the "ident" method, I get rejected.

If I create an ident map to map the numeric UID to my name, it works:

# MAPNAME IDENT-USERNAME PG-USERNAME
ldapuser 1000 bortzmeyer

It is of course very inconvenient to duplicate my LDAP database into
pg_ident.conf. Is there a better way?

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Frank Finner 2005-03-02 15:01:55 PL/Perl trusted throws error on example function
Previous Message Alexandru Coseru 2005-03-02 14:41:25 Error: "catalog is missing 8 attribute(s) for relid 16683"