User Authentication: LDAP and "local" accounts concurrently ?

Поиск
Список
Период
Сортировка
От Lentes, Bernd
Тема User Authentication: LDAP and "local" accounts concurrently ?
Дата
Msg-id 1819852155.20922807.1542983802608.JavaMail.zimbra@helmholtz-muenchen.de
обсуждение исходный текст
Ответы Re: User Authentication: LDAP and "local" accounts concurrently ?
Re: User Authentication: LDAP and "local" accounts concurrently ?
Список pgsql-admin
Hi,

i created a Postgres Server 9.6 on a SLES 12 SP3 box. In our institution we have a Windows ADS which i like to use to
authenticateusers via LDAP. But because there are several prerequisites to create such an account, which make things 
sometime complicated, i also like to create "local" users (users defined in the postgres DB itself).
Is it possible to use both concurrently ? Some users autheticate via LDAP, others local.

From what i read in the doc it does not seem to work:
"Each record specifies a connection type, a client IP address range (if relevant for the connection type),
a database name, a user name, and the authentication method to be used for connections matching
these parameters. The first record with a matching connection type, client address, requested database,
and user name is used to perform authentication.
====> There is no “fall-through” or “backup”: if one record
is chosen and the authentication fails, subsequent records are not considered. If no record matches,
access is denied. <=====

But maybe i misunderstood that.


Bernd
--

Bernd Lentes
Systemadministration
Institut für Entwicklungsgenetik
Gebäude 35.34 - Raum 208
HelmholtzZentrum münchen
[ mailto:bernd.lentes@helmholtz-muenchen.de | bernd.lentes@helmholtz-muenchen.de ]
phone: +49 89 3187 1241
fax: +49 89 3187 2294
[ http://www.helmholtz-muenchen.de/idg | http://www.helmholtz-muenchen.de/idg ]

wer Fehler macht kann etwas lernen
wer nichts macht kann auch nichts lernen


Helmholtz Zentrum Muenchen
Deutsches Forschungszentrum fuer Gesundheit und Umwelt (GmbH)
Ingolstaedter Landstr. 1
85764 Neuherberg
www.helmholtz-muenchen.de
Aufsichtsratsvorsitzende: MinDirig.in Petra Steiner-Hoffmann
Stellv.Aufsichtsratsvorsitzender: MinDirig. Dr. Manfred Wolter
Geschaeftsfuehrer: Prof. Dr. med. Dr. h.c. Matthias Tschoep, Heinrich Bassler, Dr. rer. nat. Alfons Enhsen
Registergericht: Amtsgericht Muenchen HRB 6466
USt-IdNr: DE 129521671



В списке pgsql-admin по дате отправления:

Предыдущее
От: AYahorau@ibagroup.eu
Дата:
Сообщение: Re: Logical replication monitoring
Следующее
От: Tom Lane
Дата:
Сообщение: Re: User Authentication: LDAP and "local" accounts concurrently ?