Re: LDAP and roles - Mailing list pgsql-admin

From Stephen Frost
Subject Re: LDAP and roles
Date
Msg-id 20201209163050.GW16415@tamriel.snowman.net
Whole thread Raw
In response to LDAP and roles  (Ron <ronljohnsonjr@gmail.com>)
List pgsql-admin
Greetings,

* Ron (ronljohnsonjr@gmail.com) wrote:
> Does LDAP obviate the need for the PASSWORD clause of CREATE ROLE? It sounds
> obvious, but I wanted to verify before deciding whether or not to try LDAP,
> and did not see any reference in
> https://www.postgresql.org/docs/12/sql-createrole.html.

Using GSSAPI also results in the password not being needed to be set for
the role, and is actually secure, unlike LDAP-based auth where the
user's password is happily sent in the clear to the PG server.

Thanks,

Stephen

Attachment

pgsql-admin by date:

Previous
From: Scott Ribe
Date:
Subject: Re: 12 to 13 migration, the privs error with pg_pltemplate
Next
From: Scott Ribe
Date:
Subject: Re: 12 to 13 migration, the privs error with pg_pltemplate