Re: pgbouncer with ldap

From: Ayub M <hiayub(at)gmail(dot)com>
To: Achilleas Mantzios <achill(at)matrix(dot)gatewaynet(dot)com>
Cc: pgsql-general(at)lists(dot)postgresql(dot)org
Subject: Re: pgbouncer with ldap
Date: 2019-09-12 08:54:18
Message-ID: CAOS0qEue1+jxPZzDhcq2y1ThZCgHY68GRv=7m3vTjwxZcEe6Kw@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Okay, thanks for the response. Unfortunately Aurora does not expose these
files or I should say there is no concept of these files in AWS managed
Aurora DB service. Anyway I will give a try and let you know.

On Thu, Sep 12, 2019 at 1:52 AM Achilleas Mantzios <
achill(at)matrix(dot)gatewaynet(dot)com> wrote:

> On 11/9/19 2:47 μ.μ., Ayub M wrote:
>
> Achilleas, for this setup to work are changes to postgresql.conf and
> pg_hba.conf needed? I am trying to implement this for AWS rds Aurora where
> these files are not accessible.
>
> Those files are needed in any case if you work with postgresql.
> Unfortunately no experience with Aurora. He have been building from source
> for ages.
>
> On Mon, Sep 9, 2019, 6:46 AM Achilleas Mantzios <
> achill(at)matrix(dot)gatewaynet(dot)com> wrote:
>
>> On 9/9/19 12:41 μ.μ., Laurenz Albe wrote:
>> > Christoph Moench-Tegeder wrote:
>> >>> It has hba and via hba file one can specify ldap connections
>> >>>
>> >>> https://www.postgresql.org/docs/9.3/auth-pg-hba-conf.html
>> >> https://pgbouncer.github.io/config.html#hba-file-format
>> >> "Auth-method field: Only methods supported by PgBouncer’s auth_type
>> >> are supported", and "ldap" is not supported.
>> >> When there's no ldap support in pgbouncer, there's no ldap support
>> >> in pgbouncer.
>> > To throw in something less tautological:
>> >
>> > PgBouncer supports PAM authentication, so if you are on UNIX,
>> > you could use PAM's LDAP module to do what you want.
>> Right, I had written a blog about it :
>>
>> https://severalnines.com/database-blog/one-security-system-application-connection-pooling-and-postgresql-case-ldap
>>
>> However, I always wished (since my first endeavors with pgbouncer) it was
>> less complicated.
>> >
>> > Yours,
>> > Laurenz Albe
>>
>>
>> --
>> Achilleas Mantzios
>> IT DEV Lead
>> IT DEPT
>> Dynacom Tankers Mgmt
>>
>>
>>
>>
>
> --
> Achilleas Mantzios
> IT DEV Lead
> IT DEPT
> Dynacom Tankers Mgmt
>
>

--
Regards,
Ayub

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Francisco Olarte 2019-09-12 11:50:27 Re: How to reformat output of "age()" function
Previous Message Achilleas Mantzios 2019-09-12 05:51:48 Re: pgbouncer with ldap