How to audit non LDAP connections?

From: Francisco Reyes <lists(at)natserv(dot)net>
To: pgsql-general(at)postgresql(dot)org
Subject: How to audit non LDAP connections?
Date: 2015-12-04 00:16:51
Message-ID: 5660DB73.80804@natserv.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Due to security/audits have moved most users to LDAP. Looking for a way
to tell if a connection is/is not going through LDAP.

Other than errors, such as bad password, have not found a way to tell if
a connection is using LDAP or postgresql internal authentication in the
logs. Tried going through different log variables and setting verbosity
to max and did not see any indication of LDAP connections.

Long term we plan to only allow remote connections through LDAP in
pg_hba.conf, but hoping to track down any connection that is not using
LDAP to have that converted in a controlled fashion vs flipping the
switch and seeing what breaks.

Postgres 9.3

Browse pgsql-general by date

  From Date Subject
Next Message Selim Tuvi 2015-12-04 00:31:02 Re: ALTER statement hanging
Previous Message Jim Nasby 2015-12-04 00:09:20 Re: fast refresh materialized view