Étienne BERSAC comments

Results 377 comments of


                                            Étienne BERSAC

Update local role inherit cookbook [was: Quiet Ouput]

@guruguruguru I guess that these roles should inherit from `ldap_roles` too. ``` yaml - roles: - name: ldap_roles - names: - ampua_test_app - ampua_test_read parent: ldap_roles - name: ampua_test_owner options:...

Update local role inherit cookbook [was: Quiet Ouput]

Ok, I need to update cookbook. Please keep this issue opened. Do you think #315 is ok ?

Getting errors when I try to run the program, need help setting it up

Fun. It looks like an int password in yaml breaks ldap2pg. The workaround is to quote the password. Can you confirm this ?

Getting errors when I try to run the program, need help setting it up

Thanks for the feedback. I'm reopening to provide a better error in such case.

Create schema of same name when user is created

Hi @joshlk actually, you can already do this by hacking the ACL mechanism :-) Just think `grant` as `create` and `revoke` as `drop`. This should look like: ``` yml acls:...

Create schema of same name when user is created

I'm thinking of extending ldap2pg to help managing this case. Here is an idea: ``` yaml - role: name: '{cn}' on_create: | CREATE SCHEMA {role}; on_alter: | ALTER SCHEMA {old}...

Create schema of same name when user is created

Another solution would be the allows override of queries : ``` yaml postgres: queries: role_create: | CREATE ROLE "{role}" WITH {options}; COMMENT ON ROLE "{role}" IS '{comment}'; CREATE SCHEMA "{role}";...

Authentication with PostgreSQL - password is in the clear, can it be encrypted

Hi @love2freefly , Can you use environment variables ? Note that ldap2pg refuses to read passwords from a world readable file.

ldap2pg should not revoke `ldap_roles` from a role that is to be dropped

Hi @schmandr , thanks for this excellent feedback ! I'll take a look at this.

Cross domain queries (same Active Directory, different "forest")

Hi @arjan-saly-tfs . Interesting situation. I think that forest are more common than one may think because of enterprises bought by another. Does some users have some accounts in the...