Re: [ADMIN] Postgres user authentication with secure LDAP

Поиск
Список
Период
Сортировка
От Scott Whitney
Тема Re: [ADMIN] Postgres user authentication with secure LDAP
Дата
Msg-id CY4PR11MB1575CC5C19BBBF922280132DA7880@CY4PR11MB1575.namprd11.prod.outlook.com
обсуждение исходный текст
Ответ на Re: [ADMIN] Postgres user authentication with secure LDAP  (Jeffrey Shaw <shawjef3@gmail.com>)
Список pgsql-admin
Дерево обсуждения
Well, first off, you're on the wrong port for LDAPS://
From: pgsql-admin-owner@postgresql.org <pgsql-admin-owner@postgresql.org> on behalf of Jeffrey Shaw <shawjef3@gmail.com>
Sent: Thursday, August 10, 2017 4:57:51 PM
To: Tang, Ronald K CIV FNMOC, N6
Cc: pgsql-admin@postgresql.org
Subject: Re: [ADMIN] Postgres user authentication with secure LDAP
 
Hi Ron,
What OS is your server running, and what OS is your client running?

I found that it was only possible to get clients from a Windows machine to authenticate via ldap against a server that was also running Windows. Hopefully someone else has more experience here than me.

On Thu, Aug 10, 2017 at 5:02 PM, Tang, Ronald K CIV FNMOC, N6 <ronald.k.tang@navy.mil> wrote:
Hi,

I am trying to configure my Postgres server to use LDAP for authentication. My pg_hba.conf config line is:

ldap ldapserver=ldaps://myldaps.company.com ldapport=636 ldaptls=1  ldapprefix="uid=" ldapsuffix=",ou=People,o=my.company.com"

I queried the LDAP server successfully with the 'ldapsearch' tool with the same DN. However, I cannot get it to work successfully on Postgres. I have ssl=on and all server and CA certs installed.

Postgres version 9.5.6.

Error log:

 could not initialize LDAP: No such file or directory
LDAP authentication failed for user "user1"
 auth_failed, auth.c:288

---------------------------------------
Thanks for any helps.
Ron



--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin



Journyx, Inc.
7600 Burnet Road #300
Austin, TX 78757
www.journyx.com

p 512.834.8888 
f 512-834-8858 

Do you receive our promotional emails? Click here or visit http://journyx.com/communication-preferences to unsubscribe.

В списке pgsql-admin по дате отправления:

Предыдущее
От: Jeffrey Shaw
Дата:
Сообщение: Re: [ADMIN] Postgres user authentication with secure LDAP
Следующее
От: Stephen Frost
Дата:
Сообщение: Re: [ADMIN] Postgres user authentication with secure LDAP