Re: Coordinating database user accounts with active directory

From: Raymond O'Donnell <rod(at)iol(dot)ie>
To: pgsql-general(at)postgresql(dot)org
Subject: Re: Coordinating database user accounts with active directory
Date: 2007-11-21 22:53:08
Message-ID: 4744B6D4.1080207@iol.ie
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On 21/11/2007 22:32, Richard Huxton wrote:
> The tricky bit (I'd guess) is to trigger a script when a new user is
> created on the Windows side of things. There seem to be people

Yeah... I was thinking in terms of doing it just once, which is what I
do - it's for an educational institution, meaning it has to be done just
once a year, so I do it by hand when all the students are registered.

> I don't know of a hook on Windows that fires on the user-creation event.
> Would a cron-job + samba tools do, or does it need to be up + running
> the same instant as the Windows-user?

I don't either. Maybe a cron job that checks for new AD users via LDAP
and creates the database user when one is found? I don't know whether
you can tell when a user is created from LDAP....if you can, then new
users are those created since the last time you checked; and if not,
then you have to store all the users created thus far so as to tell
who's new, so it gets a little messy.

Just thinking out loud....

Ray.

---------------------------------------------------------------
Raymond O'Donnell, Director of Music, Galway Cathedral, Ireland
rod(at)iol(dot)ie
---------------------------------------------------------------

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Tom Hart 2007-11-21 23:13:19 best way to handle enum type
Previous Message Bruce Momjian 2007-11-21 22:43:51 Re: logging of transaction related events