pgsql: Allow custom search filters to be configured for LDAP auth

From: Peter Eisentraut <peter_e(at)gmx(dot)net>
To: pgsql-committers(at)postgresql(dot)org
Subject: pgsql: Allow custom search filters to be configured for LDAP auth
Date: 2017-09-12 13:51:45
Message-ID: E1drlbN-0004OQ-Gp@gemulon.postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-committers

Allow custom search filters to be configured for LDAP auth

Before, only filters of the form "(<ldapsearchattribute>=<user>)"
could be used to search an LDAP server. Introduce ldapsearchfilter
so that more general filters can be configured using patterns, like
"(|(uid=$username)(mail=$username))" and "(&(uid=$username)
(objectClass=posixAccount))". Also allow search filters to be included
in an LDAP URL.

Author: Thomas Munro
Reviewed-By: Peter Eisentraut, Mark Cave-Ayland, Magnus Hagander
Discussion: https://postgr.es/m/CAEepm=0XTkYvMci0WRubZcf_1am8=gP=7oJErpsUfRYcKF2gwg@mail.gmail.com

Branch
------
master

Details
-------
https://git.postgresql.org/pg/commitdiff/83aaac41c66959a3ebaec7daadc4885b5f98f561

Modified Files
--------------
doc/src/sgml/client-auth.sgml | 43 +++++++++++++++++++++++++++++++++++----
src/backend/libpq/auth.c | 44 ++++++++++++++++++++++++++++++++--------
src/backend/libpq/hba.c | 47 +++++++++++++++++++++++++++++++------------
src/include/libpq/hba.h | 1 +
4 files changed, 110 insertions(+), 25 deletions(-)

Browse pgsql-committers by date

  From Date Subject
Next Message Alvaro Herrera 2017-09-12 13:58:31 Re: Re: [COMMITTERS] pgsql: Use MINVALUE/MAXVALUE instead of UNBOUNDED for range partition b
Previous Message Michael Meskes 2017-09-12 02:53:57 pgsql: Fixed ECPG to correctly handle out-of-scope cursor declarations