Re: DBMS_LDAP equivalent utility in PostgreSQL

From: Mukesh Rajpurohit <vivasvan1902(at)gmail(dot)com>
To: Dan Smith <j(dot)daniel(dot)smith1(at)gmail(dot)com>
Cc: Pgsql-admin <pgsql-admin(at)lists(dot)postgresql(dot)org>
Subject: Re: DBMS_LDAP equivalent utility in PostgreSQL
Date: 2023-03-29 01:55:20
Message-ID: CAL+ptAAzbzKC5BPeQTW_R4ZEXdy9sfi=oLpAqM6W8dOOrPj04w@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

Thanks Dan.

On Wed, Mar 29, 2023, 6:50 AM Dan Smith <j(dot)daniel(dot)smith1(at)gmail(dot)com> wrote:

> Postgres supports LDAP with config (pg_hba.conf). That config is not
> exposed on RDS.
>
> With RDS, you can enable IAM authentication. This uses IAM for
> authentication. You must enable the feature on your RDS instance, create
> an IAM user / policy, and finally grant rds_iam to the database user.
> Users with iam authentication have to call "aws rds generate-db-auth-token"
> vs and use the response as their password when connecting.
>
> It might be possible to further mix solutions or automate things on AWS,
> but, those are the building blocks.
>
> There's a link with all the supported RDS Postgres extensions below.
>
> References:
> * https://www.postgresql.org/docs/current/auth-ldap.html
> *
> https://aws.amazon.com/blogs/database/using-iam-authentication-to-connect-with-pgadmin-amazon-aurora-postgresql-or-amazon-rds-for-postgresql/
> *
> https://docs.aws.amazon.com/AmazonRDS/latest/PostgreSQLReleaseNotes/postgresql-extensions.html
>
>
> Best regards,
>
> Dan Smith
>
>
> On Tue, Mar 28, 2023, 01:01 Mukesh Rajpurohit <vivasvan1902(at)gmail(dot)com>
> wrote:
>
>> Hi All,
>> We are migrating pl/sql code from Oracle to PostgreSQL. We
>> have the package DBMS_LDAP in oracle pl/sql code and need to migrate it to
>> PostgreSQL pl/pgsql. Please let me know if DBMS_LDAP equivalent code/
>> utility is available in PostgreSQL also.
>>
>> My second related question is regarding ldap. Do we have any open source
>> ldap equivalent extension/ utility in PostgreSQL which is supported in AWS
>> RDS for PostgreSQLtoo? I can use AWS IAM for this purpose but I am looking
>> for some extension/ open source utility for ldap etc which suffice this
>> purpose.
>>
>> Thanks in advance.
>>
>> Thanks
>> Mukesh
>>
>

In response to

Browse pgsql-admin by date

  From Date Subject
Next Message Ron 2023-03-29 14:16:09 Host name in .pgpass
Previous Message Dan Smith 2023-03-29 01:19:50 Re: DBMS_LDAP equivalent utility in PostgreSQL