Re: Can Pg somehow recognize/honor linux groups to control useraccess ?

Поиск
Список
Период
Сортировка
От Ravi Krishna
Тема Re: Can Pg somehow recognize/honor linux groups to control useraccess ?
Дата
Msg-id FF6CDF45-61AC-4DD2-9FD0-8B4265D57927@aol.com
обсуждение исходный текст
Ответ на Re: Can Pg somehow recognize/honor linux groups to control useraccess ?  ("David G. Johnston" <david.g.johnston@gmail.com>)
Ответы Re: Can Pg somehow recognize/honor linux groups to control useraccess ?  ("David G. Johnston" <david.g.johnston@gmail.com>)
Re: Can Pg somehow recognize/honor linux groups to control useraccess ?  (Dimitri Maziuk <dmaziuk@bmrb.wisc.edu>)
Список pgsql-general
Дерево обсуждения


On Aug 22, 2018, at 12:08 , David G. Johnston <david.g.johnston@gmail.com> wrote:

On Wed, Aug 22, 2018 at 8:58 AM, Ravi Krishna <sravikrishna@aol.com> wrote:
AFAIK PG does not support it , as yet. IMO this should be implemented as a priority.

It does not support it natively, no.  What it does support is PAM which I'm led to believe (haven't used it myself) can be configured to accommodate this use case as well as many other configurations people may think up.

https://www.postgresql.org/docs/10/static/auth-methods.html#AUTH-PAM


I am not sure this is the same what I was thinking about.  For example, in db2, connect privilege can be granted to a group and so is grant privilege as in
GRANT SELECT ON TABLE SCHEMA.TABLE TO GROUP ABC;
GRANT CONNECT ON DATABASE TO GROUP ABC 

And the group may not necessarily be local group on the node.  it can be AD too.

In fact DBAs don't even need to get involved when a new user needs DB access.  Sysadmin had to just add that user in a group and we are done.

В списке pgsql-general по дате отправления:

Предыдущее
От: "Joshua D. Drake"
Дата:
Сообщение: Re: Can Pg somehow recognize/honor linux groups to control useraccess ?
Следующее
От: "David G. Johnston"
Дата:
Сообщение: Re: Can Pg somehow recognize/honor linux groups to control useraccess ?