Unix Technical Forum

Re: [PATCHES] LDAP auth

This is a discussion on Re: [PATCHES] LDAP auth within the pgsql Hackers forums, part of the PostgreSQL category; --> >> I'm almost done with implementing a patch that recognizes >> LDAP URLs in pg_services.conf and queries an LDAP ...


Go Back   Unix Technical Forum > Database Server Software > PostgreSQL > pgsql Hackers

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 04-12-2008, 02:28 AM
Albe Laurenz
 
Posts: n/a
Default Re: [PATCHES] LDAP auth

>> I'm almost done with implementing a patch that recognizes
>> LDAP URLs in pg_services.conf and queries an LDAP server for
>> a connection option string.
>>
>> Currently I'm coding against libldap [...]

>
> If you haven't already, look at the ldap auth patch in the queue for
> some win32 specific issues - we do not want to rely on OpenLDAP on
> windows, since there is a builtin version that's almost the
> same (close enough).


Thank you for drawing my attention to that, I wasn't aware of it.
I'll definitely try to use the native winldap interface and try to
make my patch as compatible to yours as possible (configure
--with-ldap).

If your patch is accepted and a dependency on OpenLDAP is introduced,
my patch will provide an additional gain with no additional cost.

Yours,
Laurenz Albe

---------------------------(end of broadcast)---------------------------
TIP 5: don't forget to increase your free space map settings

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #2 (permalink)  
Old 04-12-2008, 02:29 AM
Greg Stark
 
Posts: n/a
Default Re: [PATCHES] LDAP auth

"Albe Laurenz" <all@adv.magwien.gv.at> writes:

> If your patch is accepted and a dependency on OpenLDAP is introduced,
> my patch will provide an additional gain with no additional cost.


Out of curiosity what would an SQL database want with ldap anyways?
Is it just a set of bindings for ldap functions for applications?

--
greg


---------------------------(end of broadcast)---------------------------
TIP 2: Don't 'kill -9' the postmaster

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #3 (permalink)  
Old 04-12-2008, 02:29 AM
Andrew Dunstan
 
Posts: n/a
Default Re: [PATCHES] LDAP auth

Greg Stark wrote:

>"Albe Laurenz" <all@adv.magwien.gv.at> writes:
>
>
>
>>If your patch is accepted and a dependency on OpenLDAP is introduced,
>>my patch will provide an additional gain with no additional cost.
>>
>>

>
>Out of curiosity what would an SQL database want with ldap anyways?
>
>
>



Single Sign On is the obvious answer.

I find it hard to imagine LDAP being sensibly use for any other postgres
purpose than authentication, despite recent flights of fancy on the list
about storing large slabs of config data there.

cheersw

andrew


---------------------------(end of broadcast)---------------------------
TIP 6: explain analyze is your friend

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #4 (permalink)  
Old 04-12-2008, 02:29 AM
Bruno Wolff III
 
Posts: n/a
Default Re: [PATCHES] LDAP auth

On Mon, Mar 06, 2006 at 15:00:07 -0500,
Andrew Dunstan <andrew@dunslane.net> wrote:
>
> I find it hard to imagine LDAP being sensibly use for any other postgres
> purpose than authentication, despite recent flights of fancy on the list
> about storing large slabs of config data there.


It can also make sense to get authorization information from LDAP.

---------------------------(end of broadcast)---------------------------
TIP 4: Have you searched our list archives?

http://archives.postgresql.org

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #5 (permalink)  
Old 04-12-2008, 02:29 AM
Andrew Dunstan
 
Posts: n/a
Default Re: [PATCHES] LDAP auth

Bruno Wolff III wrote:

>On Mon, Mar 06, 2006 at 15:00:07 -0500,
> Andrew Dunstan <andrew@dunslane.net> wrote:
>
>
>>I find it hard to imagine LDAP being sensibly use for any other postgres
>>purpose than authentication, despite recent flights of fancy on the list
>>about storing large slabs of config data there.
>>
>>

>
>It can also make sense to get authorization information from LDAP.
>
>
>


Yes, that's true. But I can imagine putting a shared config setup on a
web server, or an ftp server, or a tftp server, a good deal more easily
than putting it in LDAP.

cheers

andrew

---------------------------(end of broadcast)---------------------------
TIP 4: Have you searched our list archives?

http://archives.postgresql.org

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


All times are GMT. The time now is 07:16 PM.


Powered by vBulletin® Version 3.6.5
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0
www.UnixAdminTalk.com