Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss
Active directory and ingres
28 views
Skip to first unread message
Arthur Ward
Apr 17, 2013, 12:58:51 PM4/17/13
to
Has anyone used active directory to log user's into ingres? I see a
couple of kbowlege base documents that talk about it but they do not
convince me its going to work.
Arthur
Armand Pirvu
Apr 17, 2013, 1:35:11 PM4/17/13
to Ingres and related product discussion forum, info-...@kettleriverconsulting.com
Hi Arthur
Some I wrote me self when I was at Actian. Those work. I tested them . They all are correct but the one I am pointing at is in fact keeping things organized
Kb 419421
Hth
Ap
Sent from my iPad
> _______________________________________________
> Info-Ingres mailing list
> Info-...@kettleriverconsulting.com
> http://ext-cando.kettleriverconsulting.com/mailman/listinfo/info-ingres
Some I wrote me self when I was at Actian. Those work. I tested them . They all are correct but the one I am pointing at is in fact keeping things organized
Kb 419421
Hth
Ap
Sent from my iPad
> Info-Ingres mailing list
> Info-...@kettleriverconsulting.com
> http://ext-cando.kettleriverconsulting.com/mailman/listinfo/info-ingres
Peter Jameson
Apr 17, 2013, 3:57:42 PM4/17/13
to
I can't access the KB article previously mentioned but can confirm that
Ingres can authenticate using AD with a small amount of additional
programming.
You need to write a small executable that takes username and password on
stdin and returns 0 or 1 depending on password authentication success
or failure.
You then setup an ingres DBMS variable of II_SHADOW_PWD that points to
your executable. Then all connections coming into your Ingres
installation will use that executable to authenticate.
So in the case of Active Directory we made our executable connect to
AD's LDAP service using the username and password (just use the one of
the domain controllers as the host name) and it then returns a suitable
success / failure code. Works very well.
Using this mechanism you can point Ingres at any authentication source
you fancy, it's a simple but effective design.
If you want to create users from Active Directory, install samba and use
some of the samba tools in a script to query an AD group's membership
and create suitable user / database access permissions for each one.
Ingres can authenticate using AD with a small amount of additional
programming.
You need to write a small executable that takes username and password on
stdin and returns 0 or 1 depending on password authentication success
or failure.
You then setup an ingres DBMS variable of II_SHADOW_PWD that points to
your executable. Then all connections coming into your Ingres
installation will use that executable to authenticate.
So in the case of Active Directory we made our executable connect to
AD's LDAP service using the username and password (just use the one of
the domain controllers as the host name) and it then returns a suitable
success / failure code. Works very well.
Using this mechanism you can point Ingres at any authentication source
you fancy, it's a simple but effective design.
If you want to create users from Active Directory, install samba and use
some of the samba tools in a script to query an AD group's membership
and create suitable user / database access permissions for each one.
Arthur Ward
Apr 18, 2013, 10:55:11 AM4/18/13
to
pioneer when I do this.
Arthur
Ingres Forums
Apr 19, 2013, 7:41:10 AM4/19/13
to
We have it set up so that either Linux users or AD users can
authenticate.
If you'd like more details I can post over the weekend.
Jeremy
--
jruffer
------------------------------------------------------------------------
jruffer's Profile: http://community.actian.com/forum/member.php?userid=504
View this thread: http://community.actian.com/forum/showthread.php?t=15161
0 new messages