User Authentication: LDAP and "local" accounts concurrently ? - Mailing list pgsql-admin

From Lentes, Bernd
Subject User Authentication: LDAP and "local" accounts concurrently ?
Date
Msg-id 1819852155.20922807.1542983802608.JavaMail.zimbra@helmholtz-muenchen.de
Whole thread Raw
Responses Re: User Authentication: LDAP and "local" accounts concurrently ?  (Tom Lane <tgl@sss.pgh.pa.us>)
Re: User Authentication: LDAP and "local" accounts concurrently ?  (Stephen Frost <sfrost@snowman.net>)
List pgsql-admin
Hi,

i created a Postgres Server 9.6 on a SLES 12 SP3 box. In our institution we have a Windows ADS which i like to use to
authenticateusers via LDAP. But because there are several prerequisites to create such an account, which make things 
sometime complicated, i also like to create "local" users (users defined in the postgres DB itself).
Is it possible to use both concurrently ? Some users autheticate via LDAP, others local.

From what i read in the doc it does not seem to work:
"Each record specifies a connection type, a client IP address range (if relevant for the connection type),
a database name, a user name, and the authentication method to be used for connections matching
these parameters. The first record with a matching connection type, client address, requested database,
and user name is used to perform authentication.
====> There is no “fall-through” or “backup”: if one record
is chosen and the authentication fails, subsequent records are not considered. If no record matches,
access is denied. <=====

But maybe i misunderstood that.


Bernd
--

Bernd Lentes
Systemadministration
Institut für Entwicklungsgenetik
Gebäude 35.34 - Raum 208
HelmholtzZentrum münchen
[ mailto:bernd.lentes@helmholtz-muenchen.de | bernd.lentes@helmholtz-muenchen.de ]
phone: +49 89 3187 1241
fax: +49 89 3187 2294
[ http://www.helmholtz-muenchen.de/idg | http://www.helmholtz-muenchen.de/idg ]

wer Fehler macht kann etwas lernen
wer nichts macht kann auch nichts lernen


Helmholtz Zentrum Muenchen
Deutsches Forschungszentrum fuer Gesundheit und Umwelt (GmbH)
Ingolstaedter Landstr. 1
85764 Neuherberg
www.helmholtz-muenchen.de
Aufsichtsratsvorsitzende: MinDirig.in Petra Steiner-Hoffmann
Stellv.Aufsichtsratsvorsitzender: MinDirig. Dr. Manfred Wolter
Geschaeftsfuehrer: Prof. Dr. med. Dr. h.c. Matthias Tschoep, Heinrich Bassler, Dr. rer. nat. Alfons Enhsen
Registergericht: Amtsgericht Muenchen HRB 6466
USt-IdNr: DE 129521671



pgsql-admin by date:

Previous
From: AYahorau@ibagroup.eu
Date:
Subject: Re: Logical replication monitoring
Next
From: Tom Lane
Date:
Subject: Re: User Authentication: LDAP and "local" accounts concurrently ?