Re: Authentication Enhancement Proposal

On Feb 1, 2011, at 12:39 PM, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> wrote:

> Christopher Hotchkiss <christopher(dot)hotchkiss(at)gmail(dot)com> writes:
>> I would like to propose (and volunteer to do if its considered to be a
>> decent idea) to extend the mapping of users to roles in the pg_ident.conf to
>> incorporate groups.
>
> Um ... there isn't any real distinction between users and groups
> anymore, they're all roles. So it's not clear to me what you're
> proposing that doesn't work now. Or at least could be made to work,
> possibly not in quite the way you're thinking, but using the already
> existing features.
>
> regards, tom lane

I'm sorry I wasn't clear Tom. I was referring to allowing the mapping of operating system users/groups to postgres roles. Today as far as I can tell only os users are mappable not the groups. Thoughts?

Thanks,
Christopher Hotchkiss