Re: pgpass file type restrictions

From: Stephen Frost <sfrost(at)snowman(dot)net>
To: Desidero <desidero(at)gmail(dot)com>
Cc: Andrew Dunstan <andrew(dot)dunstan(at)2ndquadrant(dot)com>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, pgsql-general(at)postgresql(dot)org
Subject: Re: pgpass file type restrictions
Date: 2017-10-19 22:34:20
Message-ID: 20171019223420.GX4628@tamriel.snowman.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Matt,

* Desidero (desidero(at)gmail(dot)com) wrote:
> I agree that it would be better for us to use something other than LDAP,

If you happen to be using Active Directory, then you should really be
using Kerberos-based auth instead. AD includes both LDAP and a KDC and
the LDAP half is really *not* the way to handle authentication in that
environment (or, well, really, LDAP isn't a terribly secure option in
any environment, but if it's all you've got and you're not allowed to
change then I suppose there's not much to be done about it).

Thanks!

Stephen

In response to

Browse pgsql-general by date

  From Date Subject
Next Message John R Pierce 2017-10-19 23:50:19 Re: Alternative to pgAdmin Postgres Manager that support pgagent (jobs)
Previous Message Juliano 2017-10-19 22:15:41 Alternative to pgAdmin Postgres Manager that support pgagent (jobs)