We have a client interested in using LDAP (specifically Active Directory) for user authentication on a PostgreSQL AWS RDS (Aurora, specifically) database.
Anybody doing this successfully?
Postgresql – Postgres RDS: is there a way to use LDAP authentication
aws-auroraldappostgresql
Related Solutions
There is two independant steps with Postgres and LDAP:
- tells Postgres how to query LDAP to authenticate one user, it's documented here . You must use
ldapauthentication method inpg_hba.conf. - You must create the roles in Postgres, with options etc. You can use a tool like ldap2pg or a custom script.
That way, you can manage roles and ACL just as usual. You just don't need to store passwords in cluster.
Open System Monitor from Dash and select the Filesystems tab.
Or alternatively open a Terminal and type:
df -h
Best Answer
As much I am aware this may not be possible. Currently, AWS has IAM authentication for postgres which in my humble opinion has a bit further to go before it can be adopted. ie once the IAM user is mapped to the DB Role any once can create a token on behalf on a DB role.