Re: LDAP Authentication

John R Pierce <pierce@xxxxxxxxxxxx> · Wed, 22 Apr 2015 15:06:23 -0700



    On 4/22/2015 2:57 PM, Joseph Kregloh
      wrote:

    
      I see. That would still require a manual process to create
        the user on each server. I was planing on using some already
        existing scripts to create the user automatically on all servers
        and then LDAP would authorize depending on attributes in their
        LDAP profile.
    
    
    but thats not how it works, so all the 'planing' in the world won't
    change a thing.

    
    access rights per database are managed with GRANT, users must be
    CREATE USER on each server regardless of how they are authenticated.

    
    -- 
john r pierce, recycling bits in santa cruz