Re: pgbouncer with ldap

On 11/9/19 2:47 μ.μ., Ayub M wrote:
> Achilleas, for this setup to work are changes to postgresql.conf and pg_hba.conf needed? I am trying to implement this for AWS rds Aurora where these files are not accessible.
>
Those files are needed in any case if you work with postgresql. Unfortunately no experience with Aurora. He have been building from source for ages.
> On Mon, Sep 9, 2019, 6:46 AM Achilleas Mantzios <achill(at)matrix(dot)gatewaynet(dot)com <mailto:achill(at)matrix(dot)gatewaynet(dot)com>> wrote:
>
> On 9/9/19 12:41 μ.μ., Laurenz Albe wrote:
> > Christoph Moench-Tegeder wrote:
> >>> It has hba and via hba file one can specify ldap connections
> >>>
> >>> https://www.postgresql.org/docs/9.3/auth-pg-hba-conf.html
> >> https://pgbouncer.github.io/config.html#hba-file-format
> >> "Auth-method field: Only methods supported by PgBouncer’s auth_type
> >> are supported", and "ldap" is not supported.
> >> When there's no ldap support in pgbouncer, there's no ldap support
> >> in pgbouncer.
> > To throw in something less tautological:
> >
> > PgBouncer supports PAM authentication, so if you are on UNIX,
> > you could use PAM's LDAP module to do what you want.
> Right, I had written a blog about it :
> https://severalnines.com/database-blog/one-security-system-application-connection-pooling-and-postgresql-case-ldap
>
> However, I always wished (since my first endeavors with pgbouncer) it was less complicated.
> >
> > Yours,
> > Laurenz Albe
>
>
> --
> Achilleas Mantzios
> IT DEV Lead
> IT DEPT
> Dynacom Tankers Mgmt
>
>
>

--
Achilleas Mantzios
IT DEV Lead
IT DEPT
Dynacom Tankers Mgmt