From: | João Gaspar <joao(dot)f(dot)r(dot)gaspar(at)gmail(dot)com> |
---|---|
To: | pgsql-general(at)lists(dot)postgresql(dot)org |
Subject: | [LDAPS] Test connection user with ldaps server |
Date: | 2021-02-13 10:36:52 |
Message-ID: | CAM+zXj10AbGLpaPhmUaGQ+fpBnSpBs=TkOZgAs4PaS415uD6eg@mail.gmail.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general |
Hi all,
I have a PostgreSQL 13.1 (RHEL 8.3) Server and I want to configure the
pg_hba.conf with a remote ldaps server.
My steps:
I create a PostgreSQL user1 with superuser role to test the ldaps
authentication method in the terminal client.
Modify the pg_hba.conf to:
host all all 0.0.0.0/0 ldap
ldapurl="ldaps://serverurl:636/DC=company,DC=example,DC=com?sAMAccountName?sub"
ldapbinddn="user-to-do-autentication-ldap-connection" ldapbindpasswd="
user-ldap-connection password-autentication"
Save and restart the PostgreSQL service.
Try to connect with the terminal client with psql -h
postgresqlremoteserverhost -U user1 and after putting the password give the
following error:
psql: FATAL: LDAP authentication failed for user "user1"
I validate the ldap user1 with ldapsearch (in the RHEL host) and the user1
appears in the ldapsearch correctly using the same ldapurl, ldapbinddn and
ldapbinpasswd.
Checking the remote postgresql logs, the connection to the remote ldaps do
the correct authentication but can´t search by the
attribute sAMAccountName. Here is the PostgreSQL log:
could not search LDAP for filter "(sAMAccountName=user1)" on server
"serverurl": Operations error 2021-02-13 10:02:54.679 WET [1127801] DETAIL:
LDAP diagnostics: 000004DC: LdapErr: DSID-0C0907E9, comment: To perform
this operation a successful bind must be completed on the connection., data
0, v2580
Info: The user1 was created as well in the ldaps server with sAMAccountName
user1.
It seems that the problem is in the pg_hba.conf how to tell the search, can
anyone have similar problem ou resolution?
Thank you for your time.
Best regards,
João Gaspar
From | Date | Subject | |
---|---|---|---|
Next Message | Rob Sargent | 2021-02-13 16:57:27 | certs in connection string |
Previous Message | Helmut Bender | 2021-02-13 09:16:30 | Re: Segmentation fault on startup |