The following bug has been logged online:
Bug reference: 3123
Logged by: Brian Topping
Email address: topping@codehaus.org
PostgreSQL version: 8.2
Operating system: Linux
Description: Problem with LDAP auth strings
Details:
http://www.mail-archive.com/pgsql-general@postgresql.org/msg92652.html
outlines a bit of it.
The options to the ldap auth method in pg_hba.conf doesn't work properly.
The dn base is completely ignored, and the suffix has all the commas parsed
out of it for some reason.
If it were working correctly, the base dn would be concatenated with the
prefix and the username to create the correct DN to send to the server. The
suffix should not strictly be necessary.