Re: Can Pg somehow recognize/honor linux groups to control user access ?

[Ravi Krishna <sravikrishna@xxxxxxx>]

On Aug 22, 2018, at 12:08 , David G. Johnston <david.g.johnston@xxxxxxxxx> wrote:

On Wed, Aug 22, 2018 at 8:58 AM, Ravi Krishna <sravikrishna@xxxxxxx> wrote:

AFAIK PG does not support it , as yet. IMO this should be implemented as a priority.

It does not support it natively, no.  What it does support is PAM which I'm led to believe (haven't used it myself) can be configured to accommodate this use case as well as many other configurations people may think up.

https://www.postgresql.org/docs/10/static/auth-methods.html#AUTH-PAM

I am not sure this is the same what I was thinking about.  For example, in db2, connect privilege can be granted to a group and so is grant privilege as in

GRANT SELECT ON TABLE SCHEMA.TABLE TO GROUP ABC;

GRANT CONNECT ON DATABASE TO GROUP ABC 

And the group may not necessarily be local group on the node.  it can be AD too.

In fact DBAs don't even need to get involved when a new user needs DB access.  Sysadmin had to just add that user in a group and we are done.