Jay,, * John Scalia (jayknowsunix@xxxxxxxxx) wrote: > A new federal related project has asked me if PostgreSQL can authenticate a user using Active Directory or LDAP. I've never used either of these and therefore have no real idea. > Hence, my question. Is there a way to use either of these technologies to authenticate a user? The short answer is yes. Active Directory uses Kerberos for authentication, which PostgreSQL supports through the GSS authentication mechanism. LDAP authentication is also supported but is strongly discouraged in an Active Directory environment (by Microsoft) as Kerberos should be used instead since it's a much more secure solution. LDAP-based authentication requires sending the password to PG as cleartext. Thanks! Stephen
Attachment:
signature.asc
Description: Digital signature
