Re: More flexible LDAP auth search filters?

From: Peter Eisentraut <peter(dot)eisentraut(at)2ndquadrant(dot)com>
To: Thomas Munro <thomas(dot)munro(at)enterprisedb(dot)com>
Cc: Mark Cave-Ayland <mark(dot)cave-ayland(at)ilande(dot)co(dot)uk>, Magnus Hagander <magnus(at)hagander(dot)net>, Pg Hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: More flexible LDAP auth search filters?
Date: 2017-09-11 19:33:42
Message-ID: 0a7646b1-f6f6-1364-f0e3-814aed302db4@2ndquadrant.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On 9/8/17 21:31, Thomas Munro wrote:
> +if ($^O eq 'darwin')
> +{
> + $slapd = '/usr/local/opt/openldap/libexec/slapd';
> + $ldap_schema_dir = '/usr/local/etc/openldap/schema';
> +}
>
> I'm guessing this is the MacPorts location, and someone from that
> other tribe that uses Brew can eventually post a patch to make this
> look in more places.

Or the other way around :)

> +my $ldap_port = int(rand() * 16384) + 49152;
>
> Hmm. I guess ldapi (Unix domain sockets) would be less roulette-like,
> but require client side support too.

Yeah, issue similar to the SSL tests. The above formula is what
PostgresNode uses.

> Here's a change I needed to make to run this here. It seems that to
> use "database mdb" I'd need to add a config line to tell it the path
> to load back_mdb.so from. I could have done, but I noticed that if I
> tell it to use raw ldif files instead it's happy. Does this still
> work for you on the systems you tested?

Yes, that seems like a better choice.

--
Peter Eisentraut http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Tom Lane 2017-09-11 20:28:01 Re: Re: proposal - using names as primary names of plpgsql function parameters instead $ based names
Previous Message Peter Geoghegan 2017-09-11 19:31:01 Re: The case for removing replacement selection sort