Thread: PostgreSQL authentication via PAM/Radius available?

Hi all, <p>we want to authenticate PostgreSQL users using a Win2k IAS (appears like radius), and I am searching a way
todo so. <p>I found several ways to make pam or different radius servers use a Postgres database for user
identification,but nothing vice versa. <br />The easiest way would be a patch for the src/backend/libpq/auth.[ch] to
addanother authentication scheme like pam or radius, has anybody written something like that? <pre>--  
MfG Daniel Tepas

Evangelisches u. Johanniter Klinikum Duisburg/Dinslaken/Oberhausen gGmbH
Abteilung für Krankenhausinformatik, Gerrickstr. 21, 47137 Duisburg
Tel. 0203-508-5990/5555, Fax 0203-451-31434</pre>  

Daniel Tepas writes:

> The easiest way would be a patch for the src/backend/libpq/auth.[ch] to add another authentication scheme like
> pam or radius, has anybody written something like that?

I don't know how radius authentication works, but for pam authentication
you will have to extend the libpq protocol and the API and all client
applications to allow the PAM authentication to pass along arbitrary
prompts (usually a password prompt, but it could be anything any number of
times).  This looks like a lot of work for little benefit.

--
Peter Eisentraut      peter_e@gmx.net       http://yi.org/peter-e/