Re: LDAP authentication - Mailing list pgsql-admin

From Bruce Momjian
Subject Re: LDAP authentication
Date
Msg-id 200810150212.m9F2CaP29689@momjian.us
Whole thread Raw
In response to Re: LDAP authentication  (Evan Rempel <erempel@uvic.ca>)
List pgsql-admin
Evan Rempel wrote:
> Well, the list became very quiet on this question. Can anyone chime in with
> suggestions to have some accounts authenticated by ldap and the remainder by MD5

Create a group/role and list that in pg_hba.conf for each authentication
method.

---------------------------------------------------------------------------

>
> Evan.
>
> Evan Rempel wrote:
> > I would like to use password authentication for most users, but LDAP authentication for the remaining ones users,
> > There will be no overlap of login names.
> >
> > I do not really want to create an entry in the pg_hba.conf file for each login. What I would like is
> > something like
> >
> >
> > host    all     all             142.104.0.0/24        MD5
> > host    all     all             142.104.0.0/24        ldap...
> >
> > in hopes that if the account can be authenticated by MD5 local postgresql accounts, then it is,
> > otherwise it will be authenticated by ldap.
> >
> > Is this type of setup possible?
>
> --
> Evan Rempel
>
> --
> Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
> To make changes to your subscription:
> http://www.postgresql.org/mailpref/pgsql-admin

--
  Bruce Momjian  <bruce@momjian.us>        http://momjian.us
  EnterpriseDB                             http://enterprisedb.com

  + If your life is a hard drive, Christ can be your backup. +

pgsql-admin by date:

Previous
From: Tom Lane
Date:
Subject: Re: log activity questions
Next
From: "Mark Steben"
Date:
Subject: backup server - how to disconnect