Hey everyone,
i want to set up User trusted authentication on our Windows hosted Firebird server. For this purpose i have followed this guide:
https://ib-aid.com/download/docs/fb5migrationguide.html#_setting_up_trusted_authentication
On the second step it verifies any user trying to connect to the database, which isnt what i want.
I want to check if the user belongs to a specific Windows group before letting him in.
Now this works for my user specifically:
create global mapping dev
using plugin win_sspi
from user "domain\MyName"
to User Sysdba;
2 Problems here:
So its not possible to assign that user to my own created role.
Wildcard:
CREATE Global MAPPING dev
USING PLUGIN WIN_SSPI
FROM User "DN%"
TO ROLE my_own_role;
or
Group:
create global mapping trusted_auth
using plugin win_sspi
from Group "dn\Developer_group"
to ROLE my_own_role;
Is it even possible to create mapping that automatically assigns every user within a certain active directory group to a role?
Best regards,
Mustafa