Re: LDAP authentication

From: Bruce Momjian <bruce(at)momjian(dot)us>
To: Evan Rempel <erempel(at)uvic(dot)ca>
Cc: "pgsql-admin(at)postgresql(dot)org" <pgsql-admin(at)postgresql(dot)org>
Subject: Re: LDAP authentication
Date: 2008-10-15 02:12:36
Message-ID: 200810150212.m9F2CaP29689@momjian.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

Evan Rempel wrote:
> Well, the list became very quiet on this question. Can anyone chime in with
> suggestions to have some accounts authenticated by ldap and the remainder by MD5

Create a group/role and list that in pg_hba.conf for each authentication
method.

---------------------------------------------------------------------------

>
> Evan.
>
> Evan Rempel wrote:
> > I would like to use password authentication for most users, but LDAP authentication for the remaining ones users,
> > There will be no overlap of login names.
> >
> > I do not really want to create an entry in the pg_hba.conf file for each login. What I would like is
> > something like
> >
> >
> > host all all 142.104.0.0/24 MD5
> > host all all 142.104.0.0/24 ldap...
> >
> > in hopes that if the account can be authenticated by MD5 local postgresql accounts, then it is,
> > otherwise it will be authenticated by ldap.
> >
> > Is this type of setup possible?
>
> --
> Evan Rempel
>
> --
> Sent via pgsql-admin mailing list (pgsql-admin(at)postgresql(dot)org)
> To make changes to your subscription:
> http://www.postgresql.org/mailpref/pgsql-admin

--
Bruce Momjian <bruce(at)momjian(dot)us> http://momjian.us
EnterpriseDB http://enterprisedb.com

+ If your life is a hard drive, Christ can be your backup. +

In response to

Browse pgsql-admin by date

  From Date Subject
Next Message Mark Steben 2008-10-15 14:11:58 backup server - how to disconnect
Previous Message Tom Lane 2008-10-15 00:43:35 Re: log activity questions