]> granicus.if.org Git - postgresql/commit
Allow custom search filters to be configured for LDAP auth
authorPeter Eisentraut <peter_e@gmx.net>
Tue, 12 Sep 2017 13:46:14 +0000 (09:46 -0400)
committerPeter Eisentraut <peter_e@gmx.net>
Tue, 12 Sep 2017 13:49:04 +0000 (09:49 -0400)
commit83aaac41c66959a3ebaec7daadc4885b5f98f561
tree2e96d2fe57254ebdf90aad0ceee2ee5b95321aa4
parent35e15688269a2af13f4cddff0c13536a9a42115d
Allow custom search filters to be configured for LDAP auth

Before, only filters of the form "(<ldapsearchattribute>=<user>)"
could be used to search an LDAP server.  Introduce ldapsearchfilter
so that more general filters can be configured using patterns, like
"(|(uid=$username)(mail=$username))" and "(&(uid=$username)
(objectClass=posixAccount))".  Also allow search filters to be included
in an LDAP URL.

Author: Thomas Munro
Reviewed-By: Peter Eisentraut, Mark Cave-Ayland, Magnus Hagander
Discussion: https://postgr.es/m/CAEepm=0XTkYvMci0WRubZcf_1am8=gP=7oJErpsUfRYcKF2gwg@mail.gmail.com
doc/src/sgml/client-auth.sgml
src/backend/libpq/auth.c
src/backend/libpq/hba.c
src/include/libpq/hba.h