LDAP authentication

carlosreimer@terra.com.br wrote:

Hello,

I saw many messages about ldap authentication but I�m still not sure if
PostgreSQL can use it?

Are you using windows or unix? On unix, postgresql can use pam
(pluggable authentication modules) for authentication. There are
pam modules for about any authentication schema you can image, including
ldap.

Can I use it? Should I apply some patch before? Where can I find some doc
about?

Just compile a version of postgres that includes pam support (Most
binary packages already include that), add a line containing
"all all 0.0.0.0 0.0.0.0 pam" to pg_hba.conf, and create a
/etc/pam.d/postgres file.

greetings, Florian Pflug

Are you using windows or unix? On unix, postgresql can use pam

We are using a mix of windows and unix+linux and I think PAM can not be used
with windows. Am I right?

Is there another way?

carlosreimer@terra.com.br wrote:

Are you using windows or unix? On unix, postgresql can use pam

We are using a mix of windows and unix+linux and I think PAM can not be used
with windows. Am I right?

Is there another way?

Not that I would know...

But try googling around for pam and windows. Theres are rather large change
the someone already ported pam.

I guess compiling pam using cygwin would be quite straight-forward - but since
AFAIK postgres on win32 doesn't use cygwin, you'd have to figure out if a non-cygwin
app can link to cygwin-based libs.

greetings, Florian Pflug

May I suggest you take a look at www.openldap.org and the following:
http://www.samse.fr/GPL/ldap_pg/HOWTO/

<carlosreimer@terra.com.br> wrote in message
news:PEEPKDFEHHEMKBBFPOOKCEOGCNAA.carlosreimer@terra.com.br...

On Fri, 2006-05-26 at 10:55, codeWarrior wrote:

May I suggest you take a look at www.openldap.org and the following:
http://www.samse.fr/GPL/ldap_pg/HOWTO/

Note that that's more about backing LDAP with PostgreSQL, not the other
way around.

still a good faq though

On Fri, 2006-05-26 at 17:38 +0200, Florian G. Pflug wrote:

carlosreimer@terra.com.br wrote:

Are you using windows or unix? On unix, postgresql can use pam

We are using a mix of windows and unix+linux and I think PAM can not be used
with windows. Am I right?

Is there another way?

Not that I would know...

I think there is pam-smb, that comes with SAMBA, and can authenticate
agains NT-domain controller (or samba acting as one).

SAMBA in turn can be configured to authenticate against LDAP.

--
-R

Em Sexta 26 Maio 2006 12:55, codeWarrior escreveu:

May I suggest you take a look at www.openldap.org and the following:
http://www.samse.fr/GPL/ldap_pg/HOWTO/

This looks like the opposite: the HOWTO above is for LDAP using PostgreSQL as
backend not PostgreSQL using LDAP to authenticate.

--
Jorge Godoy <jgodoy@gmail.com>