| From: | Stephen Frost <sfrost(at)snowman(dot)net> |
|---|---|
| To: | Desidero <desidero(at)gmail(dot)com> |
| Cc: | Andrew Dunstan <andrew(dot)dunstan(at)2ndquadrant(dot)com>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, pgsql-general(at)postgresql(dot)org |
| Subject: | Re: pgpass file type restrictions |
| Date: | 2017-10-19 22:34:20 |
| Message-ID: | 20171019223420.GX4628@tamriel.snowman.net |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-general |
Matt,
* Desidero (desidero(at)gmail(dot)com) wrote:
> I agree that it would be better for us to use something other than LDAP,
If you happen to be using Active Directory, then you should really be
using Kerberos-based auth instead. AD includes both LDAP and a KDC and
the LDAP half is really *not* the way to handle authentication in that
environment (or, well, really, LDAP isn't a terribly secure option in
any environment, but if it's all you've got and you're not allowed to
change then I suppose there's not much to be done about it).
Thanks!
Stephen
| From | Date | Subject | |
|---|---|---|---|
| Next Message | John R Pierce | 2017-10-19 23:50:19 | Re: Alternative to pgAdmin Postgres Manager that support pgagent (jobs) |
| Previous Message | Juliano | 2017-10-19 22:15:41 | Alternative to pgAdmin Postgres Manager that support pgagent (jobs) |