Re: Coordinating database user accounts with active directory

From: Richard Huxton <dev(at)archonet(dot)com>
To: rod(at)iol(dot)ie
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: Coordinating database user accounts with active directory
Date: 2007-11-21 22:32:11
Message-ID: 4744B1EB.6090807@archonet.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Raymond O'Donnell wrote:
> On 21/11/2007 19:44, Marc Munro wrote:
>> Is there a simple way of coordinating active directory users with
>> database accounts? I am happy to write tools to deal with the
>> database end of things, but have no experience with active directory.
>> Any and
>
> You could use a VBScript script on the domain server to dump a
> comma-delimited list of users, then use this to generate CREATE USER
> statements to create the database users.

The tricky bit (I'd guess) is to trigger a script when a new user is
created on the Windows side of things. There seem to be people
authenticating via Windows otherwise.

I don't know of a hook on Windows that fires on the user-creation event.
Would a cron-job + samba tools do, or does it need to be up + running
the same instant as the Windows-user?

--
Richard Huxton
Archonet Ltd

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Bruce Momjian 2007-11-21 22:43:51 Re: logging of transaction related events
Previous Message Martin Gainty 2007-11-21 22:01:35 Re: Read-only availability of a standby server?