Re: implement ldap authentication in PostgreSQL

From: Andreas Wenk <a(dot)wenk(at)netzmeister-st-pauli(dot)de>
To: mitra nazemian <nazemian(dot)mitra(at)gmail(dot)com>
Cc: pgsql-admin(at)postgresql(dot)org
Subject: Re: implement ldap authentication in PostgreSQL
Date: 2009-07-21 10:38:31
Message-ID: 4A659AA7.4020009@netzmeister-st-pauli.de
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

Andreas Wenk schrieb:
> mitra nazemian schrieb:
>> thanks
>> but I has read them. I dont understand where I shoud spacify the cn,
>> dn in postgresql too use them in pg_hba.conf.
>> please help me
>>
>> On Mon, Jul 20, 2009 at 11:50 AM, Andreas Wenk
>> <a(dot)wenk(at)netzmeister-st-pauli(dot)de
>> <mailto:a(dot)wenk(at)netzmeister-st-pauli(dot)de>> wrote:
>>
>> mitra nazemian schrieb:
>>
>> hi,
>> I want too implement ldap authentication in PostgreSQL in linux,
>> but I cant.
>> Please help me...
>> Tanx
>>
>> Hi,
>>
>> first you should understand the basics of authentication in
>> postgresql.
>>
>>
>> http://www.postgresql.org/docs/current/static/client-authentication.html
>>
>> Then jump to this manual part:
>>
>>
>> http://www.postgresql.org/docs/current/static/auth-methods.html#AUTH-LDAP
>>
>> Cheers
>>
>> Andy
>>
>> -- Sent via pgsql-admin mailing list (pgsql-admin(at)postgresql(dot)org
>> <mailto:pgsql-admin(at)postgresql(dot)org>)
>> To make changes to your subscription:
>> http://www.postgresql.org/mailpref/pgsql-admin
>
> Hi ,
>
> for postgresql versions 8.2, 8.3 use this in your pg_hba.conf:
>
> host all all 127.0.0.1/32 ldap /
> "ldap://your.domain.com/dc=company,dc=com;uid=;,ou=employees,dc=company,dc=com"
>
>
> In postgresql 8.4 use this:
>
> host all all 127.0.0.1/32 ldap
> ldapserver=your.domain.com / ldapprefix="uid="
> ldapsuffix=",ou=employees,dc=company,dc=com"
>
> This is not tested since I don't have ldap support in 8.4. But it's the
> way it works.
>
> Everything is in one line. You have to set your.domain.com, company, com
> and employees.
>
> A small hint - please don't forget to reply also to the list ...
>
> Cheers
>
> Andy
>
> P.S.: As I am not a sysadmin, thanks for help goes to Andreas Putzo ;-)

just had a look to my reply and I saw everything in one line. So the / sign is just to
mark a line break - just drop it ....

Cheers

Andy

In response to

Responses

Browse pgsql-admin by date

  From Date Subject
Next Message Daniel Cristian Cruz 2009-07-21 11:59:58 COUNT(DISTINCT field) OVER (PARTITION BY another_field)
Previous Message Andreas Wenk 2009-07-21 10:18:44 Re: implement ldap authentication in PostgreSQL