Re: fallback authentication

On Fri, Dec 10, 2004 at 20:50:56 -0500,
  Ron Peterson <rpeterso@mtholyoke.edu> wrote:
> On Fri, Dec 10, 2004 at 03:20:50PM -0500, Ron Peterson wrote:
>
> > Sometimes, however, I would like to create an account in PostgreSQL
> > which I do not want to also maintain in LDAP.  Is it possible to
> > configure authentication to fall through to a different method?
>
> I suppose the right thing to do is either
>
> * don't be lazy, and update my LDAP maintainance to include the
>   required accounts, or
>
> * fall through in pam.  Is there anything similar in concept to
>   libpam-pgsql, but which simply authenticates against PostgreSQL's
>   built-in authentication mechanism?

You can put per user exceptions first in your pg_hba.conf file. That way
these people will be handled by those rules, but other users can be
authenticated using pam.