Re: DNS SRV support for LDAP authentication

From: Thomas Munro <thomas(dot)munro(at)enterprisedb(dot)com>
To: Pg Hackers <pgsql-hackers(at)postgresql(dot)org>
Cc: Mark Cave-Ayland <mark(dot)cave-ayland(at)ilande(dot)co(dot)uk>
Subject: Re: DNS SRV support for LDAP authentication
Date: 2018-11-16 01:52:55
Message-ID: CAEepm=2HqoeHAMFXQ69w=5NzAfCWz-jq5rq7Wo-S158GQ2=mvg@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox
Thread:
Lists: pgsql-hackers

On Wed, Nov 7, 2018 at 4:39 PM Thomas Munro
<thomas(dot)munro(at)enterprisedb(dot)com> wrote:
> On Tue, Sep 25, 2018 at 2:09 PM Thomas Munro
> <thomas(dot)munro(at)enterprisedb(dot)com> wrote:
> > Some people like to use DNS SRV records to advertise LDAP servers on
> > their network. Microsoft Active Directory is usually (always?) set up
> > that way. Here is a patch to allow our LDAP auth module to support
> > that kind of discovery.

Rebased.

I took the liberty of CCing Mark Cave-Ayland, who had some great
advice on the last round of LDAP feature tweaks[1]. Mark, if you have
any comments on the sanity of this proposal, they'd be much
appreciated, otherwise of course please feel free to ignore. Thanks!

[1] https://www.postgresql.org/message-id/flat/CAEepm%3D0XTkYvMci0WRubZcf_1am8%3DgP%3D7oJErpsUfRYcKF2gwg%40mail.gmail.com

--
Thomas Munro
http://www.enterprisedb.com

Attachment Content-Type Size
0001-Add-DNS-SRV-support-for-LDAP-server-discovery-v2.patch application/x-patch 6.6 KB

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Amit Langote 2018-11-16 01:57:57 Re: ATTACH/DETACH PARTITION CONCURRENTLY
Previous Message Tom Lane 2018-11-16 01:19:05 Re: make installcheck-world in a clean environment