Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add LDAP support #469

Open
makeconfig2017 opened this issue Mar 3, 2020 · 9 comments
Open

Add LDAP support #469

makeconfig2017 opened this issue Mar 3, 2020 · 9 comments
Labels
support more of a usage question, not really asking for a code change

Comments

@makeconfig2017
Copy link

Is there any way to use LDAP authentification with Pgbouncer ?

@petere
Copy link
Member

petere commented Mar 4, 2020

Currently only via PAM

@petere petere added the support more of a usage question, not really asking for a code change label Mar 4, 2020
@makeconfig2017
Copy link
Author

Surfing the internet didn't find good howto for configuring pgbouncer pam ldap. Even in pgbouncer documentation good explaining auth_type md5, but not pam ldap. Maybee somebody can write a manual how to do it, trying to tune pam ldap authorization by myself haven't any success.

@stevenwinfield
Copy link
Contributor

This one is quite good

@vldanch
Copy link

vldanch commented Oct 9, 2020

@stevenwinfield This does not work normally, you can attach more detailed instructions on how to set it up if you tried it !?

@vldanch
Copy link

vldanch commented Oct 22, 2020

@petere How long to wait for solutions to this problem?
Or can you somehow join the development? =)

@stevenwinfield
Copy link
Contributor

@vldanch I'm not sure I could be more detailed than the "PgBouncer configuration" section of the link I previously gave...

  • I compiled pgbouncer with PAM support
  • I set auth_type = pam in pgbouncer.ini
  • I created a PAM config file at /etc/pam.d/pgbouncer, similar to the one in the link, though we use pam_sss.so rather than pam_ldap.so:
auth        required      pam_env.so
auth        required      pam_access.so debug accessfile=<path/to/access/file>
auth        sufficient    pam_sss.so forward_pass
auth        required      pam_deny.so

@DenisKirichenko24
Copy link

Hello guys, any updates about LDAP support for pgbouncer?

@AndrewJackson2020
Copy link
Contributor

LDAP support would be huge. Ideally all postgres auth mechanisms should be implemented at the connection pool layer, including kerberos.

Without LDAP support in PGBouncer I need to make the decision between connection pooling or LDAP. Would prefer to have both.

@devrimgunduz
Copy link

@petere did you take a look at this?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
support more of a usage question, not really asking for a code change
Projects
None yet
Development

No branches or pull requests

7 participants