Home > mailing lists

Thread: Pgadmin with active directory.

Pgadmin with active directory.

From

Le-DOC

Date:

05 October 2020, 16:14:16

Hello, I'm trying to enable ldap authentication with our active directory.

I configure config_distro.py with:

AUTHENTICATION_SOURCES = ['ldap', 'internal']

LDAP_AUTO_CREATE_USER = True

LDAP_CONNECTION_TIMEOUT = 30

LDAP_SERVER_URI = 'ldap://xxxx.pam.lan:389'

LDAP_USERNAME_ATTRIBUTE = 'sAMAccountName'

LDAP_SEARCH_FILTER = '(&(objectClass=user)(|(memberof=CN=00 - Gestionnaires Applications,OU=Distribution,OU=_Groupes,DC=pam,DC=lan)(memberof=CN=00 - Administration Système,OU=Distribution,OU=_Groupes,DC=pam,DC=lan)(memberof=CN=Urbanisation SEI,OU=Distribution,OU=_Groupes,DC=pam,DC=lan)))'

LDAP_SEARCH_SCOPE = 'SUBTREE'

LDAP_BIND_USER = 'Browse.PGAdmin@pam.lan'

LDAP_BIND_PASSWORD = '...'

But still login or password invalid.

I have no more error in Apache log, or pgadmin log.

Do you have an idea?

Re: Pgadmin with active directory.

From

Khushboo Vashi

Date:

06 October 2020, 07:44:45

Hi,

On Mon, Oct 5, 2020 at 6:44 PM Le-DOC <ledoc666@gmail.com> wrote:

Hello, I'm trying to enable ldap authentication with our active directory.
I configure config_distro.py with:

AUTHENTICATION_SOURCES = ['ldap', 'internal']
LDAP_AUTO_CREATE_USER = True
LDAP_CONNECTION_TIMEOUT = 30
LDAP_SERVER_URI = 'ldap://xxxx.pam.lan:389'
LDAP_USERNAME_ATTRIBUTE = 'sAMAccountName'
LDAP_SEARCH_FILTER = '(&(objectClass=user)(|(memberof=CN=00 - Gestionnaires Applications,OU=Distribution,OU=_Groupes,DC=pam,DC=lan)(memberof=CN=00 - Administration Système,OU=Distribution,OU=_Groupes,DC=pam,DC=lan)(memberof=CN=Urbanisation SEI,OU=Distribution,OU=_Groupes,DC=pam,DC=lan)))'
LDAP_SEARCH_SCOPE = 'SUBTREE'
LDAP_BIND_USER = 'Browse.PGAdmin@pam.lan'
LDAP_BIND_PASSWORD = '...'

Please set LDAP_SEARCH_BASE_DN, Refer https://www.pgadmin.org/docs/pgadmin4/4.26/enabling_ldap_authentication.html for more information.

Thanks,

Khushboo

But still login or password invalid.
I have no more error in Apache log, or pgadmin log.
Do you have an idea?

Re: Pgadmin with active directory.

From

Le-DOC

Date:

06 October 2020, 10:37:40

Hello,

Email/Username is not valid.

When I try username. Case sensitive is correct.

If I try an email: incorrect username or password.

Thanks

Le mar. 6 oct. 2020 à 06:44, Khushboo Vashi <khushboo.vashi@enterprisedb.com> a écrit :

Hi,

On Mon, Oct 5, 2020 at 6:44 PM Le-DOC <ledoc666@gmail.com> wrote:
Hello, I'm trying to enable ldap authentication with our active directory.
I configure config_distro.py with:

AUTHENTICATION_SOURCES = ['ldap', 'internal']
LDAP_AUTO_CREATE_USER = True
LDAP_CONNECTION_TIMEOUT = 30
LDAP_SERVER_URI = 'ldap://xxxx.pam.lan:389'
LDAP_USERNAME_ATTRIBUTE = 'sAMAccountName'
LDAP_SEARCH_FILTER = '(&(objectClass=user)(|(memberof=CN=00 - Gestionnaires Applications,OU=Distribution,OU=_Groupes,DC=pam,DC=lan)(memberof=CN=00 - Administration Système,OU=Distribution,OU=_Groupes,DC=pam,DC=lan)(memberof=CN=Urbanisation SEI,OU=Distribution,OU=_Groupes,DC=pam,DC=lan)))'
LDAP_SEARCH_SCOPE = 'SUBTREE'
LDAP_BIND_USER = 'Browse.PGAdmin@pam.lan'
LDAP_BIND_PASSWORD = '...'

Please set LDAP_SEARCH_BASE_DN, Refer https://www.pgadmin.org/docs/pgadmin4/4.26/enabling_ldap_authentication.html for more information.

Thanks,
Khushboo

But still login or password invalid.
I have no more error in Apache log, or pgadmin log.
Do you have an idea?

Re: Pgadmin with active directory.

From

Khushboo Vashi

Date:

06 October 2020, 11:56:22

Hi,

On Tue, Oct 6, 2020 at 1:07 PM Le-DOC <ledoc666@gmail.com> wrote:

Hello,

Email/Username is not valid.
When I try username. Case sensitive is correct.

So, you are able to login with your LDAP username and password.

Currently, the pgAdmin LDAP implementation only allows case sensitive username, but we do have RM (Ref: https://redmine.postgresql.org/issues/5836) to support the case insensitive username.

If I try an email: incorrect username or password.

Which email address are you trying ?

In case of LDAP Authentication, you can login only through valid LDAP username.

Thanks,

Khushboo

Thanks

Le mar. 6 oct. 2020 à 06:44, Khushboo Vashi <khushboo.vashi@enterprisedb.com> a écrit :
Hi,

On Mon, Oct 5, 2020 at 6:44 PM Le-DOC <ledoc666@gmail.com> wrote:
Hello, I'm trying to enable ldap authentication with our active directory.
I configure config_distro.py with:

AUTHENTICATION_SOURCES = ['ldap', 'internal']
LDAP_AUTO_CREATE_USER = True
LDAP_CONNECTION_TIMEOUT = 30
LDAP_SERVER_URI = 'ldap://xxxx.pam.lan:389'
LDAP_USERNAME_ATTRIBUTE = 'sAMAccountName'
LDAP_SEARCH_FILTER = '(&(objectClass=user)(|(memberof=CN=00 - Gestionnaires Applications,OU=Distribution,OU=_Groupes,DC=pam,DC=lan)(memberof=CN=00 - Administration Système,OU=Distribution,OU=_Groupes,DC=pam,DC=lan)(memberof=CN=Urbanisation SEI,OU=Distribution,OU=_Groupes,DC=pam,DC=lan)))'
LDAP_SEARCH_SCOPE = 'SUBTREE'
LDAP_BIND_USER = 'Browse.PGAdmin@pam.lan'
LDAP_BIND_PASSWORD = '...'

Please set LDAP_SEARCH_BASE_DN, Refer https://www.pgadmin.org/docs/pgadmin4/4.26/enabling_ldap_authentication.html for more information.

Thanks,
Khushboo

But still login or password invalid.
I have no more error in Apache log, or pgadmin log.
Do you have an idea?

Re: Pgadmin with active directory.

From

Le-DOC

Date:

06 October 2020, 12:21:28

It worked. Great 😀

May I change LDAP_USERNAME_ATTRIBUTE to mail for logining in with email from ldap instead of username?

Le mar. 6 oct. 2020 à 10:56, Khushboo Vashi <khushboo.vashi@enterprisedb.com> a écrit :

Hi,

On Tue, Oct 6, 2020 at 1:07 PM Le-DOC <ledoc666@gmail.com> wrote:
Hello,

Email/Username is not valid.
When I try username. Case sensitive is correct.
So, you are able to login with your LDAP username and password.
Currently, the pgAdmin LDAP implementation only allows case sensitive username, but we do have RM (Ref: https://redmine.postgresql.org/issues/5836) to support the case insensitive username.

If I try an email: incorrect username or password.
Which email address are you trying ?
In case of LDAP Authentication, you can login only through valid LDAP username.

Thanks,
Khushboo

Thanks

Le mar. 6 oct. 2020 à 06:44, Khushboo Vashi <khushboo.vashi@enterprisedb.com> a écrit :
Hi,

On Mon, Oct 5, 2020 at 6:44 PM Le-DOC <ledoc666@gmail.com> wrote:
Hello, I'm trying to enable ldap authentication with our active directory.
I configure config_distro.py with:

AUTHENTICATION_SOURCES = ['ldap', 'internal']
LDAP_AUTO_CREATE_USER = True
LDAP_CONNECTION_TIMEOUT = 30
LDAP_SERVER_URI = 'ldap://xxxx.pam.lan:389'
LDAP_USERNAME_ATTRIBUTE = 'sAMAccountName'
LDAP_SEARCH_FILTER = '(&(objectClass=user)(|(memberof=CN=00 - Gestionnaires Applications,OU=Distribution,OU=_Groupes,DC=pam,DC=lan)(memberof=CN=00 - Administration Système,OU=Distribution,OU=_Groupes,DC=pam,DC=lan)(memberof=CN=Urbanisation SEI,OU=Distribution,OU=_Groupes,DC=pam,DC=lan)))'
LDAP_SEARCH_SCOPE = 'SUBTREE'
LDAP_BIND_USER = 'Browse.PGAdmin@pam.lan'
LDAP_BIND_PASSWORD = '...'

Please set LDAP_SEARCH_BASE_DN, Refer https://www.pgadmin.org/docs/pgadmin4/4.26/enabling_ldap_authentication.html for more information.

Thanks,
Khushboo

But still login or password invalid.
I have no more error in Apache log, or pgadmin log.
Do you have an idea?

Re: Pgadmin with active directory.

From

Khushboo Vashi

Date:

06 October 2020, 12:36:46

On Tue, Oct 6, 2020 at 2:51 PM Le-DOC <ledoc666@gmail.com> wrote:

It worked. Great 😀
May I change LDAP_USERNAME_ATTRIBUTE to mail for logining in with email from ldap instead of username?

As you are trying with a dedicated user approach, it should work. You can try it but you have to provide the exact attribute name for email address which is configured in your LDAP.

Le mar. 6 oct. 2020 à 10:56, Khushboo Vashi <khushboo.vashi@enterprisedb.com> a écrit :
Hi,

On Tue, Oct 6, 2020 at 1:07 PM Le-DOC <ledoc666@gmail.com> wrote:
Hello,

Email/Username is not valid.
When I try username. Case sensitive is correct.
So, you are able to login with your LDAP username and password.
Currently, the pgAdmin LDAP implementation only allows case sensitive username, but we do have RM (Ref: https://redmine.postgresql.org/issues/5836) to support the case insensitive username.

If I try an email: incorrect username or password.
Which email address are you trying ?
In case of LDAP Authentication, you can login only through valid LDAP username.

Thanks,
Khushboo

Thanks

Le mar. 6 oct. 2020 à 06:44, Khushboo Vashi <khushboo.vashi@enterprisedb.com> a écrit :
Hi,

On Mon, Oct 5, 2020 at 6:44 PM Le-DOC <ledoc666@gmail.com> wrote:
Hello, I'm trying to enable ldap authentication with our active directory.
I configure config_distro.py with:

AUTHENTICATION_SOURCES = ['ldap', 'internal']
LDAP_AUTO_CREATE_USER = True
LDAP_CONNECTION_TIMEOUT = 30
LDAP_SERVER_URI = 'ldap://xxxx.pam.lan:389'
LDAP_USERNAME_ATTRIBUTE = 'sAMAccountName'
LDAP_SEARCH_FILTER = '(&(objectClass=user)(|(memberof=CN=00 - Gestionnaires Applications,OU=Distribution,OU=_Groupes,DC=pam,DC=lan)(memberof=CN=00 - Administration Système,OU=Distribution,OU=_Groupes,DC=pam,DC=lan)(memberof=CN=Urbanisation SEI,OU=Distribution,OU=_Groupes,DC=pam,DC=lan)))'
LDAP_SEARCH_SCOPE = 'SUBTREE'
LDAP_BIND_USER = 'Browse.PGAdmin@pam.lan'
LDAP_BIND_PASSWORD = '...'

Please set LDAP_SEARCH_BASE_DN, Refer https://www.pgadmin.org/docs/pgadmin4/4.26/enabling_ldap_authentication.html for more information.

Thanks,
Khushboo

But still login or password invalid.
I have no more error in Apache log, or pgadmin log.
Do you have an idea?