Horton

Re: DNS SRV support for LDAP authentication

Thomas Munro <thomas.munro@enterprisedb.com>

View thread View on postgr.es
From: Thomas Munro <thomas.munro@enterprisedb.com>
To: Pg Hackers <pgsql-hackers@postgresql.org>
Cc: Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk>
Date: 2018-11-16T01:52:55Z
Lists: pgsql-hackers

Attachments

On Wed, Nov 7, 2018 at 4:39 PM Thomas Munro
<thomas.munro@enterprisedb.com> wrote:
> On Tue, Sep 25, 2018 at 2:09 PM Thomas Munro
> <thomas.munro@enterprisedb.com> wrote:
> > Some people like to use DNS SRV records to advertise LDAP servers on
> > their network.  Microsoft Active Directory is usually (always?) set up
> > that way.  Here is a patch to allow our LDAP auth module to support
> > that kind of discovery.

Rebased.

I took the liberty of CCing Mark Cave-Ayland, who had some great
advice on the last round of LDAP feature tweaks[1].  Mark, if you have
any comments on the sanity of this proposal, they'd be much
appreciated, otherwise of course please feel free to ignore.  Thanks!

[1] https://www.postgresql.org/message-id/flat/CAEepm%3D0XTkYvMci0WRubZcf_1am8%3DgP%3D7oJErpsUfRYcKF2gwg%40mail.gmail.com

--
Thomas Munro
http://www.enterprisedb.com

Commits

  1. Add DNS SRV support for LDAP server discovery.