On Thu, Nov 2, 2023 at 07:56:40PM +0000, Bernd Lentes wrote:
> Hi,
>
> i'm trying to use LDAP to authenticate Postgres against a Windows AD. On elder versions it succeeded.
> Now I'm running postgresql-15-150500.8.19.noarch on a SLES 15 SP5 system.
> I can't start the db server because it doesn't know the respective configuration parameters:
>
> Nov 02 20:42:15 geneious postgresql-script[15577]: 2023-11-02 19:42:15.387 GMT [15577] LOG: unrecognized
configurationparameter "ldapbinddn" in file "/var/lib/pgsql/data/postgresql.conf" line 106
> Nov 02 20:42:15 geneious postgresql-script[15577]: 2023-11-02 19:42:15.387 GMT [15577] LOG: unrecognized
configurationparameter "ldapserver" in file "/var/lib/pgsql/data/postgresql.conf" line 108
> Nov 02 20:42:15 geneious postgresql-script[15577]: 2023-11-02 19:42:15.387 GMT [15577] LOG: unrecognized
configurationparameter "ldapport" in file "/var/lib/pgsql/data/postgresql.conf" line 110
> Nov 02 20:42:15 geneious postgresql-script[15577]: 2023-11-02 19:42:15.387 GMT [15577] LOG: unrecognized
configurationparameter "ldaptls" in file "/var/lib/pgsql/data/postgresql.conf" line 112
> Nov 02 20:42:15 geneious postgresql-script[15577]: 2023-11-02 19:42:15.387 GMT [15577] LOG: unrecognized
configurationparameter "ldapbasedn" in file "/var/lib/pgsql/data/postgresql.conf" line 114
> Nov 02 20:42:15 geneious postgresql-script[15577]: 2023-11-02 19:42:15.387 GMT [15577] LOG: unrecognized
configurationparameter "ldapbindpasswd" in file "/var/lib/pgsql/data/postgresql.conf" line 116
> Nov 02 20:42:15 geneious postgresql-script[15577]: 2023-11-02 19:42:15.387 GMT [15577] FATAL: configuration file
"/var/lib/pgsql/data/postgresql.conf"contains errors
> Nov 02 20:42:15 geneious postgresql-script[15575]: pg_ctl: could not start server
> Nov 02 20:42:15 geneious postgresql-script[15575]: Examine the log output.
> Nov 02 20:42:15 geneious systemd[1]: postgresql.service: Control process exited, code=exited, status=1/FAILURE
>
> Here is my setup from postgresql.conf:
>
> ldapbinddn = 'xxxxxxxxxxx'
> ldapserver = ldaps.scidom.de
> ldapport = 636
> ldaptls = 1
> ldapbasedn = 'xxxxxxxxx'
> ldapbindpasswd = 'xxxxxxxxxxxxxxxxx'
>
> I took the parameters from the doc from the official webpage.
> Do I need to switch on LDAP in a certain way ?
Okay, I am going to take a wild guess here, but the line numbers of the
errors skip by 2 (e.g., 106, 108), while the example you showed have
them in adjacent lines. Could there be invalid characters in the file
contents?
--
Bruce Momjian <bruce@momjian.us> https://momjian.us
EDB https://enterprisedb.com
Only you can decide what is important to you.