Re: Requesting Information for GSSAPI

From: Stephen Frost <sfrost(at)snowman(dot)net>
To: Lingesan Jeyapandy <Lingesan(dot)Jeyapandy(at)gilead(dot)com>
Cc: "pgsql-general(at)lists(dot)postgresql(dot)org" <pgsql-general(at)lists(dot)postgresql(dot)org>
Subject: Re: Requesting Information for GSSAPI
Date: 2023-07-12 18:54:32
Message-ID: ZK726FVpRAy4ikq7@tamriel.snowman.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Greetings,

* Lingesan Jeyapandy (Lingesan(dot)Jeyapandy(at)gilead(dot)com) wrote:
> We have configured postgres GSSAPI setup on Linux server. We have huge domain AD users in our org.
>
> But we are looking to limit access only to setup AD distributed groups. Is there any way to control access only at AD distribution list user can only access gssapi configured postgres environment.
>
> Our postgres version is 15.

To be able to log into the PG server, an account in PG has to exist. If
it doesn't, then the user won't be able to log in.

There are some options for sync'ing specific AD groups into PG
accounts, eg:

https://github.com/larskanis/pg-ldap-sync

Thanks,

Stephen

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Johnathan Tiamoh 2023-07-12 19:28:33 Reset Postgresql users password
Previous Message Joel Rabinovitch 2023-07-12 13:28:48 RE: How to add function schema in search_path in option definitio