Re: Use AD-account as login into Postgres.
| От | Pär Mattsson |
|---|---|
| Тема | Re: Use AD-account as login into Postgres. |
| Дата | |
| Msg-id | GV1P189MB2132634A059A3C37E102BF83A24B2@GV1P189MB2132.EURP189.PROD.OUTLOOK.COM обсуждение исходный текст |
| Ответ на | Re: Use AD-account as login into Postgres. (Holger Jakobs <holger@jakobs.com>) |
| Ответы |
Re: Use AD-account as login into Postgres.
|
| Список | pgsql-admin |
Yes this is a complete windows installation of Postgres and they will use ad-login account into the database
Mvh Pär
Från: Holger Jakobs <holger@jakobs.com>
Skickat: fredag, februari 9, 2024 20:05
Till: pgsql-admin@lists.postgresql.org <pgsql-admin@lists.postgresql.org>
Ämne: Re: Use AD-account as login into Postgres.
Skickat: fredag, februari 9, 2024 20:05
Till: pgsql-admin@lists.postgresql.org <pgsql-admin@lists.postgresql.org>
Ämne: Re: Use AD-account as login into Postgres.
Am 09.02.24 um 19:31 schrieb Pär Mattsson:
Hi!Is it only to config in hba.conf the connection info, to use AD-accounts to login in postgres.This is a windows/postres intallation 🤦♂️✌️Mvh Pär+46706069645
Hi,
Short answer: No!
SSPI using AD accounts for authentication works only in a complete Windows environment. The client and the server machine have to be member of the same AD environment, which isn't possible for non-Windows machines. Otherwise, there is no trust between the machines.
An automatic creation of PostgreSQL roles from AD accounts has to be done outside PostgreSQL, i. e. by a script running regularly.
A couple of years ago, I wrote such a script for a customer.
Regards,
Holger
-- Holger Jakobs, Bergisch Gladbach, Tel. +49-178-9759012
В списке pgsql-admin по дате отправления: