Re: [E] Re: [EXT] LDAP issues

2022-05-06 Thread heiko.onnebrink
If you use K8s and pass args to a containerized pgAadmin the LDAP related vars should be prefixed with PGADMIN_CONFIG_* to replace the defaults.. see https://www.pgadmin.org/docs/pgadmin4/development/container_deployment.html   Here a copy of our working setup:    -e ‘PGADM

Re: [EXT] LDAP issues

2022-05-06 Thread heiko.onnebrink
Hi do you have a general problem to auth against LDAP or just when you deploy it on K8s? Also would be helpful if you share the (LDAP-related) arguments that you pass to the container cheers Heiko   From: "Schroeder, Steven" Date: Thursday, 5. May 2022 at 23:44 To: "pgadmin-sup

Re: [EXT] Re: pgadmin4 container deployment with ldap-authentication

2020-08-11 Thread heiko.onnebrink
Can you confirm that the parameter that I pass to docker are (syntactical) correct to properly filter for the requested user record. As we should not timeout once we properly filter by userPrincipalName I want to be sure that filtering is properly passed to the LDAP quey.   From: Khush

Re: [EXT] Re: pgadmin4 container deployment with ldap-authentication

2020-08-11 Thread heiko.onnebrink
For sure I will log an issue.. but first I would like to sort out any other reason .   As mentioned I did an ldapsearch test first and the test resolved the user within a second. As I try to auth the exact same user with the exact same bind user credentials my expectation is that It shou

Re: [EXT] Re: pgadmin4 container deployment with ldap-authentication

2020-08-11 Thread heiko.onnebrink
Hi, I am just back from holiday and wanted to test the same (as I authored this LDAP change request I think its overdue to test it __ )) To ensure the env is fine I executed ldapsearch on the docker host to have some check first: ldapsearch -LLL -x -h ldap.mgi.de:389 -D "cn=SVCLDAP,cn=Users,d

Re: [EXT] Re: Problems to use LDAP again AD directory with disabled anonymous logon

2020-05-06 Thread heiko.onnebrink
Created feature request for this issue https://redmine.postgresql.org/issues/5484 with details proposal how to enhance it Hope someone will grab the request as LDAP support is a really long awaited feature and the request would complete the LDAP implementation. Unfortunately I have no Python sk

Re: [EXT] Re: Problems to use LDAP again AD directory with disabled anonymous logon

2020-05-05 Thread heiko.onnebrink
Hi I did as advised and get now this as response in UI {"success":0,"errormsg":"attribute type not present","info":"","result":null,"data":null} and here the error stack 2020-05-06 04:57:59,908: ERROR flask.app: attribute type not present Traceback (most recent call last): File "/usr/local/li

AW: [EXT] Re: Problems to use LDAP again AD directory with disabled anonymous logon

2020-05-05 Thread heiko.onnebrink
Hi I did as advised and get now this as response in UI  {"success":0,"errormsg":"attribute type not present","info":"","result":null,"data":null} and here the error stack 2020-05-06 04:57:59,908: ERROR flask.app: attribute type not present Traceback (most recent call last):   File "/

Problems to use LDAP again AD directory with disabled anonymous logon

2020-05-05 Thread heiko.onnebrink
Hi I am exited to see that with the latest patch we have LDAP support in pgAdmin I tried to make it work but did not succeed. We use Microsoft AD. We have a global catalog that allows LDAP access but anonymous access is disabled. I have a technical user SVCLDAP that I can use to auth against LD

Problems to use LDAP again AD directory with disabled anonymous logon

2020-05-05 Thread heiko.onnebrink
Hi I am exited to see that with the latest patch we have LDAP support in pgAdmin I tried to make it work but did not succeed. We use Microsoft AD. We have a global catalog that allows LDAP access but anonymous access is disabled. I have a technical user SVCLDAP that I can use to a

Re: pgAdmin in a multi DC self service context

2019-03-29 Thread heiko.onnebrink
Thanks for fast feedback..   One point not clear.   would it be OK just to copy the .db file from “master” location to “slave” locations: SQLITE_PATH = '/path/to/pgadmin4.db'   I do not need to preserve user dumps or session states.. just the ability to connect to a standby site (i

pgAdmin in a multi DC self service context

2019-03-29 Thread heiko.onnebrink
We have developed a RESTful self service portal to provision PostgreSQL databases (using docker container) to different datacenter. New customer can self-register and start provisioning databases instantly.   As part of the offering we plan next to provide pgAdmin in each datacenter in s