From: | Stephen Frost <sfrost(at)snowman(dot)net> |
---|---|
To: | John Scalia <jayknowsunix(at)gmail(dot)com> |
Cc: | "pgsql-admin(at)postgresql(dot)org" <pgsql-admin(at)postgresql(dot)org> |
Subject: | Re: authenticating using Active Directory? |
Date: | 2015-03-07 13:57:29 |
Message-ID: | 20150307135729.GC29780@tamriel.snowman.net |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-admin |
Jay,,
* John Scalia (jayknowsunix(at)gmail(dot)com) wrote:
> A new federal related project has asked me if PostgreSQL can authenticate a user using Active Directory or LDAP. I've never used either of these and therefore have no real idea.
> Hence, my question. Is there a way to use either of these technologies to authenticate a user?
The short answer is yes. Active Directory uses Kerberos for
authentication, which PostgreSQL supports through the GSS authentication
mechanism.
LDAP authentication is also supported but is strongly discouraged in an
Active Directory environment (by Microsoft) as Kerberos should be used
instead since it's a much more secure solution. LDAP-based
authentication requires sending the password to PG as cleartext.
Thanks!
Stephen
From | Date | Subject | |
---|---|---|---|
Next Message | Jeffrey Shaw | 2015-03-07 14:25:33 | Re: authenticating using Active Directory? |
Previous Message | Josef Springer | 2015-03-07 11:36:41 | Re: Installing PostgreSQL fails |