Re: [Auth] "ident" method and LDAP user accounts

From: Stephane Bortzmeyer <bortzmeyer(at)nic(dot)fr>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: Stephane Bortzmeyer <bortzmeyer(at)nic(dot)fr>, pgsql-general(at)postgresql(dot)org
Subject: Re: [Auth] "ident" method and LDAP user accounts
Date: 2005-03-03 08:43:17
Message-ID: 20050303084317.GA19405@nic.fr
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On Wed, Mar 02, 2005 at 02:16:29PM -0500,
Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> wrote
a message of 8 lines which said:

> > It is of course very inconvenient to duplicate my LDAP database into
> > pg_ident.conf. Is there a better way?
>
> Perhaps you can find a PAM plugin that talks to LDAP, and configure
> Postgres to use that.

It already exists (I tried it) but it does not suit my needs since it
asks for the password (and I'm already logged in, I don't want to type
a password again).

The real issue is "Why PostgreSQL does not use getpwuid when
getsockopt with SO_PEERCREED returns a numeric UID?" This would give
to PostgreSQL the real and correct user name :-(

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Tom Lane 2005-03-03 09:03:25 Re: [Auth] "ident" method and LDAP user accounts
Previous Message jack alex 2005-03-03 06:44:37 does postgres supports syslog-ng package for loging rather than using standart syslog package