Thread: LDAP Authentication

LDAP Authentication

From
Teguh R
Date:
Hi,

My first post, new to postgresql, forgive me if this is better suited to
other postgresql mailing list.

I would like to ask about LDAP authentication configuration. It is said
in documentation that first the installation compiled with LDAP option.
I use installer from official postresql site, is it LDAP authentication
ready?

Is there any straight tutorial for setting up LDAP authentication for
pg? where to put the LDAP configuration (pg_services.conf?) and other
step to make LDAP user can login using their id.

Thanks in advance,
Teguh

Re: LDAP Authentication

From
Raghavendra
Date:
Here is the setting information on pg_service.conf

http://www.postgresql.org/docs/9.0/interactive/libpq-pgservice.html

---
Best Regards,
Raghavendra
EnterpriseDB Corporation



On Fri, May 20, 2011 at 6:01 PM, Teguh R <taguah@gmail.com> wrote:
Hi,

My first post, new to postgresql, forgive me if this is better suited to other postgresql mailing list.

I would like to ask about LDAP authentication configuration. It is said in documentation that first the installation compiled with LDAP option. I use installer from official postresql site, is it LDAP authentication ready?

Is there any straight tutorial for setting up LDAP authentication for pg? where to put the LDAP configuration (pg_services.conf?) and other step to make LDAP user can login using their id.

Thanks in advance,
Teguh

--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin

Re: LDAP Authentication

From
"Mark Johnson"
Date:
 

I too have been looking into this as a new user of PostgreSQL 9.0.

1. Before you install PostgreSQL you might want to verify the LDAP packages are installed.  For example, on CentOS I might run "yum list openldap openldap-devel".   

2. If you install PostgreSQL from source code, one of the steps is to run the "configure" utility.  To use LDAP based authentication you should include the option "--with-ldap".  You might also want "--with-openssl". 

3. After PostgreSQL has been installed you can see which options were used built in using the command "$PGHOME/bin/pg_config --configure".  Check the output.  If there are no references to ldap, then go back to step 1.

4. You can also use this command to see if postgres is linked with the ldap libraries:  "ldd $PGHOME/bin/postgres".  If there are no references to ldap, then go back to steps 1 and 2.

I have not gone past this.  I ran into an issue with the one-click installer on RHEL 6 that I'm stuck on.

-Mark

-----Original Message-----
From: Teguh R [mailto:taguah@gmail.com]
Sent: Friday, May 20, 2011 08:31 AM
To: pgsql-admin@postgresql.org
Subject: [ADMIN] LDAP Authentication

Hi, My first post, new to postgresql, forgive me if this is better suited to other postgresql mailing list. I would like to ask about LDAP authentication configuration. It is said in documentation that first the installation compiled with LDAP option. I use installer from official postresql site, is it LDAP authentication ready? Is there any straight tutorial for setting up LDAP authentication for pg? where to put the LDAP configuration (pg_services.conf?) and other step to make LDAP user can login using their id. Thanks in advance, Teguh -- Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-admin

Re: LDAP Authentication

From
teguh
Date:
I did a test on Ubuntu 11.04, postgreql 9.0.4.1 - 32 bit installer, on non LDAP authenticated desktop.

mi@mi-d525:/opt/PostgreSQL/9.0/bin$ ./pg_config --configure
'--with-libs=/usr/local/lib' '--with-includes=/usr/local/include' '--prefix=/mnt/buildfarm/pginstaller/server/staging/linux' '--with-openssl' '--with-perl' '--with-python' '--with-tcl' '--with-tclconfig=/opt/ActiveTcl-8.5/lib' '--with-pam' '--with-krb5' '--enable-thread-safety' '--with-libxml' '--with-ossp-uuid' '--docdir=/mnt/buildfarm/pginstaller/server/staging/linux/doc/postgresql' '--with-libxslt' '--with-libedit-preferred'

Looks like no --with-ldap option, but there is --with-openssl option. I will trying with configure-make-install from source.

FYI, I use ds from Centos/Fedora. 

From this documentation, I think the second method of LDAP authentication will fit for my purpose.

Regards,
Teguh


2011/5/20 Mark Johnson <mark@remingtondatabasesolutions.com>
 

I too have been looking into this as a new user of PostgreSQL 9.0.

1. Before you install PostgreSQL you might want to verify the LDAP packages are installed.  For example, on CentOS I might run "yum list openldap openldap-devel".   

2. If you install PostgreSQL from source code, one of the steps is to run the "configure" utility.  To use LDAP based authentication you should include the option "--with-ldap".  You might also want "--with-openssl". 

3. After PostgreSQL has been installed you can see which options were used built in using the command "$PGHOME/bin/pg_config --configure".  Check the output.  If there are no references to ldap, then go back to step 1.

4. You can also use this command to see if postgres is linked with the ldap libraries:  "ldd $PGHOME/bin/postgres".  If there are no references to ldap, then go back to steps 1 and 2.

I have not gone past this.  I ran into an issue with the one-click installer on RHEL 6 that I'm stuck on.

-Mark

-----Original Message-----
From: Teguh R [mailto:taguah@gmail.com]
Sent: Friday, May 20, 2011 08:31 AM
To: pgsql-admin@postgresql.org
Subject: [ADMIN] LDAP Authentication

Hi, My first post, new to postgresql, forgive me if this is better suited to other postgresql mailing list. I would like to ask about LDAP authentication configuration. It is said in documentation that first the installation compiled with LDAP option. I use installer from official postresql site, is it LDAP authentication ready? Is there any straight tutorial for setting up LDAP authentication for pg? where to put the LDAP configuration (pg_services.conf?) and other step to make LDAP user can login using their id. Thanks in advance, Teguh -- Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-admin