Horton

Allow custom search filters to be configured for LDAP auth

Peter Eisentraut <peter_e@gmx.net>

View on postgr.es
Commit: 83aaac41c66959a3ebaec7daadc4885b5f98f561
Author: Peter Eisentraut <peter_e@gmx.net>
Date: 2017-09-12T13:49:04Z
Releases: 11.0 
Allow custom search filters to be configured for LDAP auth

Before, only filters of the form "(<ldapsearchattribute>=<user>)"
could be used to search an LDAP server.  Introduce ldapsearchfilter
so that more general filters can be configured using patterns, like
"(|(uid=$username)(mail=$username))" and "(&(uid=$username)
(objectClass=posixAccount))".  Also allow search filters to be included
in an LDAP URL.

Author: Thomas Munro
Reviewed-By: Peter Eisentraut, Mark Cave-Ayland, Magnus Hagander
Discussion: https://postgr.es/m/CAEepm=0XTkYvMci0WRubZcf_1am8=gP=7oJErpsUfRYcKF2gwg@mail.gmail.com

Files

PathChange+/−
doc/src/sgml/client-auth.sgml modified +39 −4
src/backend/libpq/auth.c modified +36 −8
src/backend/libpq/hba.c modified +34 −13
src/include/libpq/hba.h modified +1 −0

Documentation touched

Discussion