Re: [GENERAL] [HACKERS] USER Profiles for PostgreSQL - Mailing list pgsql-general

From chiru r
Subject Re: [GENERAL] [HACKERS] USER Profiles for PostgreSQL
Date
Msg-id CA+RSxMi5c2P+BY35q=Dyiu3gTaM_UUFF-mY-d=V0yJn--OsyCA@mail.gmail.com
Whole thread Raw
In response to Re: [GENERAL] [HACKERS] USER Profiles for PostgreSQL  (John R Pierce <pierce@hogranch.com>)
Responses Re: [GENERAL] [HACKERS] USER Profiles for PostgreSQL
List pgsql-general
Hi John,

How those application accounts get recognized in database?

Let say  App_user1 authenticated through application ,after that how the App_user1 get access to DB?

can you please provide more information ,how the app users are accessing database ?

Thanks,
Chiranjeevi


On Tue, Sep 19, 2017 at 3:45 PM, John R Pierce <pierce@hogranch.com> wrote:
On 9/19/2017 12:33 PM, chiru r wrote:
Yes, LDAP will do. However we need to sync the user accounts and  groups between AD and PG servers.and then AD profiles will apply to PG user accounts for authentication.


if you're using LDAP from the AD servers to authenticate, whats to sync?


my database servers, the only 'users' connecting to them directly are the database administrators...  the applications connect with application accounts, and if more security is required, these use certificates, or they use unix 'ident' local connections.



--
john r pierce, recycling bits in santa cruz



--
Sent via pgsql-general mailing list (pgsql-general@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general

pgsql-general by date:

Previous
From: Jerry Sievers
Date:
Subject: [GENERAL] Up to date conventional wisdom re max shared_buffer size?
Next
From: John R Pierce
Date:
Subject: Re: [GENERAL] [HACKERS] USER Profiles for PostgreSQL