\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u4f1a\u65ad\u5f00\u8fde\u63a5\uff0c\u518d\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u4e0e LDAP \u670d\u52a1\u5668\u5efa\u7acb\u4e24\u4e2a\u72ec\u7acb\u7684\u8fde\u63a5\u3002\n
\u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u9002\u7528\u4e8e\u4e24\u79cd\u6a21\u5f0f\uff1a
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
"}, "summary": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "version": "10", "link_map": {"/zh/docs/10/auth-methods.html#AUTH-LDAP": "/docs/10/auth-methods.html#AUTH-LDAP"}, "body_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u4f1a\u65ad\u5f00\u8fde\u63a5\uff0c\u518d\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u4e0e LDAP \u670d\u52a1\u5668\u5efa\u7acb\u4e24\u4e2a\u72ec\u7acb\u7684\u8fde\u63a5\u3002\n
\u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u9002\u7528\u4e8e\u4e24\u79cd\u6a21\u5f0f\uff1a
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
", "body_sha256": "7dd10d12a4f3cfc941dcc15193095fe51598ffeff9dfadccf66ed97e82c8f43d", "content_hash": "9650bc4356d0b7c4b0789ae07ddc952781038ad1d69c3030ba8f9917766299be", "source_database": "center", "source_revision": "94a4b2528372458e5662c18d406629266667c437198160a18cdfd2c4a4d6eee9"}, "signature": "", "tables_zh": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f1a\u4f7f\u7528 TLS \u52a0\u5bc6\u3002\u6ce8\u610f\uff0c\u8fd9\u53ea\u52a0\u5bc6\u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u6d41\u91cf \u2014 \u9664\u975e\u4f7f\u7528 SSL\uff0c\u5426\u5219\u4e0e\u5ba2\u6237\u7aef\u4e4b\u95f4\u7684\u8fde\u63a5\u4ecd\u4e0d\u52a0\u5bc6\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u5b83\u4ee5\u66f4\u7d27\u51d1\u3001\u6807\u51c6\u7684\u5f62\u5f0f\u66ff\u4ee3\u90e8\u5206\u5176\u4ed6 LDAP \u9009\u9879\u3002\u683c\u5f0f\u4e3a ldap://host[:port]/basedn[?[attribute][?[scope]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\u3002\u53ea\u4f7f\u7528\u4e00\u4e2a\u5c5e\u6027\uff0c\u6807\u51c6 LDAP URL \u4e2d\u7684\u8fc7\u6ee4\u5668\u3001\u6269\u5c55\u7b49\u90e8\u5206\u7ec4\u4ef6\u4e0d\u53d7\u652f\u6301\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002\u82e5\u8981\u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u9700\u5728 ldapurl \u4e4b\u5916\u4f7f\u7528 ldaptls\uff1bldaps URL \u65b9\u6848\uff08\u76f4\u63a5 SSL \u8fde\u63a5\uff09\u4e0d\u53d7\u652f\u6301\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "attributes": {"method": "ldap", "inventory": "User-visible source authentication method", "configuration": "pg_hba.conf"}, "description": ["\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002"], "manual_html": "", "manual_path": "/docs/10/auth-methods.html#AUTH-LDAP", "sections_zh": [], "localization": {"status": "complete", "sources": [{"url": "/docs/10/auth-methods.html", "method": "same-major semantic node", "sha256": "128b4f29cf06d6bde5b9e357daacb6d538044ee392e4aece0e31c90b0a37b647", "language": "zh", "matched_nodes": ["#AUTH-METHODS/div[1]/dl[0]/dt[6]", "#AUTH-METHODS/div[9]/div[10]/dl[0]/dd[1]", "#AUTH-METHODS/div[9]/div[10]/dl[0]/dd[3]", "#AUTH-METHODS/div[9]/div[10]/dl[0]/dd[5]", "#AUTH-METHODS/div[9]/div[10]/dl[0]/dd[7]", "#AUTH-METHODS/div[9]/div[10]/dl[0]/dd[9]/p[0]", "#AUTH-METHODS/div[9]/div[10]/dl[0]/dd[9]/p[2]", "#AUTH-METHODS/div[9]/div[10]/dl[0]/dd[9]/p[3]", "#AUTH-METHODS/div[9]/div[10]/dl[0]/dd[9]/p[5]", "#AUTH-METHODS/div[9]/div[21]/h3[0]", "#AUTH-METHODS/div[9]/div[21]/p[1]", "#AUTH-METHODS/div[9]/div[6]/dl[0]/dd[1]", "#AUTH-METHODS/div[9]/div[6]/dl[0]/dd[3]", "#AUTH-METHODS/div[9]/div[6]/dl[0]/dd[5]", "#AUTH-METHODS/div[9]/div[8]/dl[0]/dd[1]", "#AUTH-METHODS/div[9]/div[8]/dl[0]/dd[3]", "#AUTH-METHODS/div[9]/p[11]", "#AUTH-METHODS/div[9]/p[12]", "#AUTH-METHODS/div[9]/p[14]", "#AUTH-METHODS/div[9]/p[15]", "#AUTH-METHODS/div[9]/p[17]", "#AUTH-METHODS/div[9]/p[18]", "#AUTH-METHODS/div[9]/p[20]", "#AUTH-METHODS/div[9]/p[2]", "#AUTH-METHODS/div[9]/p[3]", "#AUTH-METHODS/div[9]/p[4]", "#AUTH-METHODS/div[9]/p[5]", "#AUTH-METHODS/div[9]/p[7]", "#AUTH-METHODS/div[9]/p[9]"]}], "language": "zh", "original_text": {"/versions/10/description/0": "Authenticate using an LDAP server. See Section 20.3.7 for details.", "/versions/10/facts/0/label": "Method", "/versions/10/facts/1/label": "Configuration", "/versions/10/facts/2/label": "Inventory", "/versions/10/facts/2/value": "User-visible source authentication method", "/versions/10/tables/0/title": "Documented method options and alternatives", "/versions/10/tables/0/columns/0/label": "Option or term", "/versions/10/tables/0/columns/1/label": "Meaning", "/versions/10/tables/0/rows/0/description": "Names or IP addresses of LDAP servers to connect to. Multiple servers may be specified, separated by spaces.", "/versions/10/tables/0/rows/1/description": "Port number on LDAP server to connect to. If no port is specified, the LDAP library's default port setting will be used.", "/versions/10/tables/0/rows/2/description": "Set to 1 to make the connection between PostgreSQL and the LDAP server use TLS encryption. Note that this only encrypts the traffic to the LDAP server \u2014 the connection to the client will still be unencrypted unless SSL is used.", "/versions/10/tables/0/rows/3/description": "String to prepend to the user name when forming the DN to bind as, when doing simple bind authentication.", "/versions/10/tables/0/rows/4/description": "String to append to the user name when forming the DN to bind as, when doing simple bind authentication.", "/versions/10/tables/0/rows/5/description": "Root DN to begin the search for the user in, when doing search+bind authentication.", "/versions/10/tables/0/rows/6/description": "DN of user to bind to the directory with to perform the search when doing search+bind authentication.", "/versions/10/tables/0/rows/7/description": "Password for user to bind to the directory with to perform the search when doing search+bind authentication.", "/versions/10/tables/0/rows/8/description": "Attribute to match against the user name in the search when doing search+bind authentication. If no attribute is specified, the uid attribute will be used.", "/versions/10/tables/0/rows/9/description": "An RFC 4516 LDAP URL. This is an alternative way to write some of the other LDAP options in a more compact and standard form. The format is ldap:// host [: port ]/ basedn [?[ attribute ][?[ scope ]]] scope must be one of base , one , sub , typically the latter. Only one attribute is used, and some other components of standard LDAP URLs such as filters and extensions are not supported. For non-anonymous binds, ldapbinddn and ldapbindpasswd must be specified as separate options. To use encrypted LDAP connections, the ldaptls option has to be used in addition to ldapurl . The ldaps URL scheme (direct SSL connection) is not supported. LDAP URLs are currently only supported with OpenLDAP, not on Windows."}, "fallback_fields": [], "source_language": "en", "original_snapshot_sha256": "e7847b191a11a4529ddb86280c29e743a1b13ff9f32e7aee1888ad82515e4e80", "canonical_center_text_hash": "9650bc4356d0b7c4b0789ae07ddc952781038ad1d69c3030ba8f9917766299be"}, "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "comparison_data": {"method": "ldap", "documented_option_names": ["ldapbasedn", "ldapbinddn", "ldapbindpasswd", "ldapport", "ldapprefix", "ldapsearchattribute", "ldapserver", "ldapsuffix", "ldaptls", "ldapurl"]}, "comparison_hash": "2f2abb5d29b5bd848efcd20de05fe7fdbe01af244252da0a6b5e8de2ef2933fa", "manual_language": "zh", "description_zh_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u4f1a\u65ad\u5f00\u8fde\u63a5\uff0c\u518d\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u4e0e LDAP \u670d\u52a1\u5668\u5efa\u7acb\u4e24\u4e2a\u72ec\u7acb\u7684\u8fde\u63a5\u3002\n
\u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u9002\u7528\u4e8e\u4e24\u79cd\u6a21\u5f0f\uff1a
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
"}, "11": {"facts": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u5b83\u4ee5\u66f4\u7d27\u51d1\u3001\u6807\u51c6\u7684\u5f62\u5f0f\u66ff\u4ee3\u90e8\u5206\u5176\u4ed6 LDAP \u9009\u9879\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "aliases": [], "related": [], "release": {"ref": "https://ftp.postgresql.org/pub/source/v11.22/postgresql-11.22.tar.bz2", "label": "11.22", "major": "11", "channel": "historical", "revision": "2cb7c97d7a0d7278851bbc9c61f467b69c094c72b81740b751108e7892ebe1f0", "source_sha256": "2cb7c97d7a0d7278851bbc9c61f467b69c094c72b81740b751108e7892ebe1f0", "catalog_fingerprint": "8f21f4444b7f68923f4762af0eb7937fa2907026e91249483e79050de012c901"}, "sources": [{"url": "https://ftp.postgresql.org/pub/source/v11.22/postgresql-11.22.tar.bz2", "label": "Matching PostgreSQL source archive", "sha256": "2cb7c97d7a0d7278851bbc9c61f467b69c094c72b81740b751108e7892ebe1f0"}, {"url": "/docs/11/auth-ldap.html", "path": "auth-ldap.html", "label": "PostgreSQL 11 English manual", "sha256": "203b80156660ac4546cd1769ab2acc110aa9abf472688031309458a9798dd37a"}, {"url": "/docs/11/auth-pg-hba-conf.html", "path": "auth-pg-hba-conf.html", "label": "PostgreSQL 11 English manual", "sha256": "5477c61a002171f5b4c462052d91231c405f39d89d825faf71e52fbae358eef7"}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/11/auth-ldap.html", "anchor": "", "locale": "zh-Hans", "version": "11", "build_id": 64, "page_key": "auth-ldap.html", "extraction": "concept-introduction", "source_hash": "319abf7f7d6015cfed1ab2032e54d9ab028f1c4f607c95b1083d2e1180a73295", "fragment_sha256": "ca833a54162cc61873fc217084dde9441f21482d2d11b3e3ef6d8a056e9566b0", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "snapshot:sha256:ef5c7bc074acae9795db16e6b7482aea3b222bd4bcce0f76831332b97a21e8a1", "translated_from_revision": null}, "body_sha256": "c6bdb7ac35ed8d3fad313620b9785daac05a7cdec35fc533be9c4d1f6538f03a", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "2cb7c97d7a0d7278851bbc9c61f467b69c094c72b81740b751108e7892ebe1f0"}, "facts_zh": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "sections": [], "center_zh": {"title": "ldap", "locale": "zh-Hans", "source": {"key": "ldap", "locale": "zh-Hans", "version": "11", "text_hash": "4fa17a6a1e1813f7e997d9421e3ce5c465ebea5124f8b22090b2cb9e7ea887b0", "collection": "auth", "dataset_hash": "7c31b524dfe136022d39a6ae8dcfac6b3bbd5f8fdaf422536599981252aff0c9", "source_database": "center", "source_revision": "2cb7c97d7a0d7278851bbc9c61f467b69c094c72b81740b751108e7892ebe1f0"}, "payload": {"facts": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u5b83\u4ee5\u66f4\u7d27\u51d1\u3001\u6807\u51c6\u7684\u5f62\u5f0f\u66ff\u4ee3\u90e8\u5206\u5176\u4ed6 LDAP \u9009\u9879\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/11/auth-ldap.html", "anchor": "", "locale": "zh-Hans", "version": "11", "build_id": 64, "page_key": "auth-ldap.html", "extraction": "concept-introduction", "source_hash": "319abf7f7d6015cfed1ab2032e54d9ab028f1c4f607c95b1083d2e1180a73295", "fragment_sha256": "ca833a54162cc61873fc217084dde9441f21482d2d11b3e3ef6d8a056e9566b0", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "snapshot:sha256:ef5c7bc074acae9795db16e6b7482aea3b222bd4bcce0f76831332b97a21e8a1", "translated_from_revision": null}, "body_sha256": "c6bdb7ac35ed8d3fad313620b9785daac05a7cdec35fc533be9c4d1f6538f03a", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "2cb7c97d7a0d7278851bbc9c61f467b69c094c72b81740b751108e7892ebe1f0"}, "sections": [], "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "description_zh_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u4f1a\u65ad\u5f00\u8fde\u63a5\uff0c\u518d\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u4e0e LDAP \u670d\u52a1\u5668\u5efa\u7acb\u4e24\u4e2a\u72ec\u7acb\u7684\u8fde\u63a5\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
"}, "summary": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "version": "11", "link_map": {"/zh/docs/11/auth-ldap.html": "/docs/11/auth-ldap.html"}, "body_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u4f1a\u65ad\u5f00\u8fde\u63a5\uff0c\u518d\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u4e0e LDAP \u670d\u52a1\u5668\u5efa\u7acb\u4e24\u4e2a\u72ec\u7acb\u7684\u8fde\u63a5\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
", "body_sha256": "8c3b74497065f3c4479f9b93a081cce91f83329990c0b700d8ea640e6cb008f4", "content_hash": "4fa17a6a1e1813f7e997d9421e3ce5c465ebea5124f8b22090b2cb9e7ea887b0", "source_database": "center", "source_revision": "2cb7c97d7a0d7278851bbc9c61f467b69c094c72b81740b751108e7892ebe1f0"}, "signature": "", "tables_zh": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u5b83\u4ee5\u66f4\u7d27\u51d1\u3001\u6807\u51c6\u7684\u5f62\u5f0f\u66ff\u4ee3\u90e8\u5206\u5176\u4ed6 LDAP \u9009\u9879\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "attributes": {"method": "ldap", "inventory": "User-visible source authentication method", "configuration": "pg_hba.conf"}, "description": ["\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002"], "manual_html": "", "manual_path": "/docs/11/auth-ldap.html", "sections_zh": [], "localization": {"status": "complete", "sources": [{"url": "/docs/11/auth-ldap.html", "method": "same-major semantic node", "sha256": "e101b7d334a59251d2c5811a081e46dc4a68e9e89e7c8857dd70856643b6c173", "language": "zh", "matched_nodes": ["#AUTH-LDAP/div[0]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[0]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[2]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[4]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[5]", "#AUTH-LDAP/div[11]/dl[0]/dd[1]", "#AUTH-LDAP/div[11]/dl[0]/dd[3]", "#AUTH-LDAP/div[11]/dl[0]/dd[5]", "#AUTH-LDAP/div[11]/dl[0]/dd[7]", "#AUTH-LDAP/div[11]/dl[0]/dd[9]", "#AUTH-LDAP/div[25]/h3[0]", "#AUTH-LDAP/div[25]/p[1]", "#AUTH-LDAP/div[6]/dl[0]/dd[1]", "#AUTH-LDAP/div[6]/dl[0]/dd[3]", "#AUTH-LDAP/div[6]/dl[0]/dd[5]", "#AUTH-LDAP/div[9]/dl[0]/dd[1]", "#AUTH-LDAP/div[9]/dl[0]/dd[3]", "#AUTH-LDAP/p[10]", "#AUTH-LDAP/p[12]", "#AUTH-LDAP/p[13]", "#AUTH-LDAP/p[14]", "#AUTH-LDAP/p[16]", "#AUTH-LDAP/p[17]", "#AUTH-LDAP/p[19]", "#AUTH-LDAP/p[20]", "#AUTH-LDAP/p[22]", "#AUTH-LDAP/p[23]", "#AUTH-LDAP/p[2]", "#AUTH-LDAP/p[3]", "#AUTH-LDAP/p[4]", "#AUTH-LDAP/p[5]", "#AUTH-LDAP/p[7]", "#AUTH-LDAP/p[8]"]}], "language": "zh", "original_text": {"/versions/11/description/0": "Authenticate using an LDAP server. See Section 20.10 for details.", "/versions/11/facts/0/label": "Method", "/versions/11/facts/1/label": "Configuration", "/versions/11/facts/2/label": "Inventory", "/versions/11/facts/2/value": "User-visible source authentication method", "/versions/11/tables/0/title": "Documented method options and alternatives", "/versions/11/tables/0/columns/0/label": "Option or term", "/versions/11/tables/0/columns/1/label": "Meaning", "/versions/11/tables/0/rows/0/description": "Names or IP addresses of LDAP servers to connect to. Multiple servers may be specified, separated by spaces.", "/versions/11/tables/0/rows/1/description": "Port number on LDAP server to connect to. If no port is specified, the LDAP library's default port setting will be used.", "/versions/11/tables/0/rows/2/description": "Set to ldaps to use LDAPS. This is a non-standard way of using LDAP over SSL, supported by some LDAP server implementations. See also the ldaptls option for an alternative.", "/versions/11/tables/0/rows/3/description": "Set to 1 to make the connection between PostgreSQL and the LDAP server use TLS encryption. This uses the StartTLS operation per RFC 4513. See also the ldapscheme option for an alternative.", "/versions/11/tables/0/rows/4/description": "String to prepend to the user name when forming the DN to bind as, when doing simple bind authentication.", "/versions/11/tables/0/rows/5/description": "String to append to the user name when forming the DN to bind as, when doing simple bind authentication.", "/versions/11/tables/0/rows/6/description": "Root DN to begin the search for the user in, when doing search+bind authentication.", "/versions/11/tables/0/rows/7/description": "DN of user to bind to the directory with to perform the search when doing search+bind authentication.", "/versions/11/tables/0/rows/8/description": "Password for user to bind to the directory with to perform the search when doing search+bind authentication.", "/versions/11/tables/0/rows/9/description": "Attribute to match against the user name in the search when doing search+bind authentication. If no attribute is specified, the uid attribute will be used.", "/versions/11/tables/0/rows/10/description": "The search filter to use when doing search+bind authentication. Occurrences of $username will be replaced with the user name. This allows for more flexible search filters than ldapsearchattribute .", "/versions/11/tables/0/rows/11/description": "An RFC 4516 LDAP URL. This is an alternative way to write some of the other LDAP options in a more compact and standard form. The format is ldap[s]:// host [: port ]/ basedn [?[ attribute ][?[ scope ][?[ filter ]]]] scope must be one of base , one , sub , typically the last. (The default is base , which is normally not useful in this application.) attribute can nominate a single attribute, in which case it is used as a value for ldapsearchattribute . If attribute is empty then filter can be used as a value for ldapsearchfilter . The URL scheme ldaps chooses the LDAPS method for making LDAP connections over SSL, equivalent to using ldapscheme=ldaps . To use encrypted LDAP connections using the StartTLS operation, use the normal URL scheme ldap and specify the ldaptls option in addition to ldapurl . For non-anonymous binds, ldapbinddn and ldapbindpasswd must be specified as separate options. LDAP URLs are currently only supported with OpenLDAP, not on Windows."}, "fallback_fields": [], "source_language": "en", "original_snapshot_sha256": "ae6923e5191460f73636b82993c9b14a49487564b7ae77744a190025a1ae96ea", "canonical_center_text_hash": "4fa17a6a1e1813f7e997d9421e3ce5c465ebea5124f8b22090b2cb9e7ea887b0"}, "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "comparison_data": {"method": "ldap", "documented_option_names": ["ldapbasedn", "ldapbinddn", "ldapbindpasswd", "ldapport", "ldapprefix", "ldapscheme", "ldapsearchattribute", "ldapsearchfilter", "ldapserver", "ldapsuffix", "ldaptls", "ldapurl"]}, "comparison_hash": "d40de945ae67b3ac60a284fdd442cc24a4e9d05bc7a7b18009b54e491c381b88", "manual_language": "zh", "description_zh_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u4f1a\u65ad\u5f00\u8fde\u63a5\uff0c\u518d\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u4e0e LDAP \u670d\u52a1\u5668\u5efa\u7acb\u4e24\u4e2a\u72ec\u7acb\u7684\u8fde\u63a5\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
"}, "12": {"facts": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u5b83\u4ee5\u66f4\u7d27\u51d1\u3001\u6807\u51c6\u7684\u5f62\u5f0f\u66ff\u4ee3\u90e8\u5206\u5176\u4ed6 LDAP \u9009\u9879\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "aliases": [], "related": [], "release": {"ref": "https://ftp.postgresql.org/pub/source/v12.22/postgresql-12.22.tar.bz2", "label": "12.22", "major": "12", "channel": "historical", "revision": "8df3c0474782589d3c6f374b5133b1bd14d168086edbc13c6e72e67dd4527a3b", "source_sha256": "8df3c0474782589d3c6f374b5133b1bd14d168086edbc13c6e72e67dd4527a3b", "catalog_fingerprint": "9f857f4ee4875f9c7de6bfc9df4b757dec8b3a0bb88eadb519c7bd267bd56149"}, "sources": [{"url": "https://ftp.postgresql.org/pub/source/v12.22/postgresql-12.22.tar.bz2", "label": "Matching PostgreSQL source archive", "sha256": "8df3c0474782589d3c6f374b5133b1bd14d168086edbc13c6e72e67dd4527a3b"}, {"url": "/docs/12/auth-ldap.html", "path": "auth-ldap.html", "label": "PostgreSQL 12 English manual", "sha256": "0fec6a76b2a86802531890638fe16dcb3f3ae4a4db04693296c29e67e5ddc908"}, {"url": "/docs/12/auth-pg-hba-conf.html", "path": "auth-pg-hba-conf.html", "label": "PostgreSQL 12 English manual", "sha256": "07e8cddcb38076c86dab95b72c4380a7a325f22401b5b7f9af5dd4931876f2cb"}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/12/auth-ldap.html", "anchor": "", "locale": "zh-Hans", "version": "12", "build_id": 65, "page_key": "auth-ldap.html", "extraction": "concept-introduction", "source_hash": "7c1a5554b468d9134f2fab48224b5634e32fa6bd3d36c16aded9219336597bb8", "fragment_sha256": "ca833a54162cc61873fc217084dde9441f21482d2d11b3e3ef6d8a056e9566b0", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "snapshot:sha256:86d2ff781f93e1de17122ebc514d5e64fcb63fed15941f496d7e146c6dcc7a49", "translated_from_revision": null}, "body_sha256": "79a79b85ad916fd7c696e03f313bc2b5906d3442345027875c1e97c3332db379", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "8df3c0474782589d3c6f374b5133b1bd14d168086edbc13c6e72e67dd4527a3b"}, "facts_zh": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "sections": [], "center_zh": {"title": "ldap", "locale": "zh-Hans", "source": {"key": "ldap", "locale": "zh-Hans", "version": "12", "text_hash": "c7a663cb0aaae0d9c63c8238324094706a38683617778f7e5106f21b25f32e6b", "collection": "auth", "dataset_hash": "7c31b524dfe136022d39a6ae8dcfac6b3bbd5f8fdaf422536599981252aff0c9", "source_database": "center", "source_revision": "8df3c0474782589d3c6f374b5133b1bd14d168086edbc13c6e72e67dd4527a3b"}, "payload": {"facts": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u5b83\u4ee5\u66f4\u7d27\u51d1\u3001\u6807\u51c6\u7684\u5f62\u5f0f\u66ff\u4ee3\u90e8\u5206\u5176\u4ed6 LDAP \u9009\u9879\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/12/auth-ldap.html", "anchor": "", "locale": "zh-Hans", "version": "12", "build_id": 65, "page_key": "auth-ldap.html", "extraction": "concept-introduction", "source_hash": "7c1a5554b468d9134f2fab48224b5634e32fa6bd3d36c16aded9219336597bb8", "fragment_sha256": "ca833a54162cc61873fc217084dde9441f21482d2d11b3e3ef6d8a056e9566b0", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "snapshot:sha256:86d2ff781f93e1de17122ebc514d5e64fcb63fed15941f496d7e146c6dcc7a49", "translated_from_revision": null}, "body_sha256": "79a79b85ad916fd7c696e03f313bc2b5906d3442345027875c1e97c3332db379", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "8df3c0474782589d3c6f374b5133b1bd14d168086edbc13c6e72e67dd4527a3b"}, "sections": [], "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "description_zh_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u4f1a\u65ad\u5f00\u8fde\u63a5\uff0c\u518d\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u4e0e LDAP \u670d\u52a1\u5668\u5efa\u7acb\u4e24\u4e2a\u72ec\u7acb\u7684\u8fde\u63a5\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
"}, "summary": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "version": "12", "link_map": {"/zh/docs/12/auth-ldap.html": "/docs/12/auth-ldap.html"}, "body_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u4f1a\u65ad\u5f00\u8fde\u63a5\uff0c\u518d\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u4e0e LDAP \u670d\u52a1\u5668\u5efa\u7acb\u4e24\u4e2a\u72ec\u7acb\u7684\u8fde\u63a5\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
", "body_sha256": "1073bec99f2ae530bf54f7a235f8cf0ceb36151eb217f7d6b943451a9770cdd1", "content_hash": "c7a663cb0aaae0d9c63c8238324094706a38683617778f7e5106f21b25f32e6b", "source_database": "center", "source_revision": "8df3c0474782589d3c6f374b5133b1bd14d168086edbc13c6e72e67dd4527a3b"}, "signature": "", "tables_zh": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u5b83\u4ee5\u66f4\u7d27\u51d1\u3001\u6807\u51c6\u7684\u5f62\u5f0f\u66ff\u4ee3\u90e8\u5206\u5176\u4ed6 LDAP \u9009\u9879\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "attributes": {"method": "ldap", "inventory": "User-visible source authentication method", "configuration": "pg_hba.conf"}, "description": ["\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002"], "manual_html": "", "manual_path": "/docs/12/auth-ldap.html", "sections_zh": [], "localization": {"status": "complete", "sources": [{"url": "/docs/12/auth-ldap.html", "method": "same-major semantic node", "sha256": "3b9ddc8c2fd4b5edae38a3f7c9d30ff3c3fb2c6248703b96048536cd1973716a", "language": "zh", "matched_nodes": ["#AUTH-LDAP/div[0]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[0]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[2]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[4]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[5]", "#AUTH-LDAP/div[11]/dl[0]/dd[1]", "#AUTH-LDAP/div[11]/dl[0]/dd[3]", "#AUTH-LDAP/div[11]/dl[0]/dd[5]", "#AUTH-LDAP/div[11]/dl[0]/dd[7]", "#AUTH-LDAP/div[11]/dl[0]/dd[9]", "#AUTH-LDAP/div[28]/h3[0]", "#AUTH-LDAP/div[28]/p[1]", "#AUTH-LDAP/div[6]/dl[0]/dd[1]", "#AUTH-LDAP/div[6]/dl[0]/dd[3]", "#AUTH-LDAP/div[6]/dl[0]/dd[5]", "#AUTH-LDAP/div[9]/dl[0]/dd[1]", "#AUTH-LDAP/div[9]/dl[0]/dd[3]", "#AUTH-LDAP/p[10]", "#AUTH-LDAP/p[12]", "#AUTH-LDAP/p[13]", "#AUTH-LDAP/p[14]", "#AUTH-LDAP/p[15]", "#AUTH-LDAP/p[17]", "#AUTH-LDAP/p[18]", "#AUTH-LDAP/p[20]", "#AUTH-LDAP/p[21]", "#AUTH-LDAP/p[23]", "#AUTH-LDAP/p[24]", "#AUTH-LDAP/p[26]", "#AUTH-LDAP/p[2]", "#AUTH-LDAP/p[3]", "#AUTH-LDAP/p[4]", "#AUTH-LDAP/p[5]", "#AUTH-LDAP/p[7]", "#AUTH-LDAP/p[8]"]}], "language": "zh", "original_text": {"/versions/12/description/0": "Authenticate using an LDAP server. See Section 20.10 for details.", "/versions/12/facts/0/label": "Method", "/versions/12/facts/1/label": "Configuration", "/versions/12/facts/2/label": "Inventory", "/versions/12/facts/2/value": "User-visible source authentication method", "/versions/12/tables/0/title": "Documented method options and alternatives", "/versions/12/tables/0/columns/0/label": "Option or term", "/versions/12/tables/0/columns/1/label": "Meaning", "/versions/12/tables/0/rows/0/description": "Names or IP addresses of LDAP servers to connect to. Multiple servers may be specified, separated by spaces.", "/versions/12/tables/0/rows/1/description": "Port number on LDAP server to connect to. If no port is specified, the LDAP library's default port setting will be used.", "/versions/12/tables/0/rows/2/description": "Set to ldaps to use LDAPS. This is a non-standard way of using LDAP over SSL, supported by some LDAP server implementations. See also the ldaptls option for an alternative.", "/versions/12/tables/0/rows/3/description": "Set to 1 to make the connection between PostgreSQL and the LDAP server use TLS encryption. This uses the StartTLS operation per RFC 4513. See also the ldapscheme option for an alternative.", "/versions/12/tables/0/rows/4/description": "String to prepend to the user name when forming the DN to bind as, when doing simple bind authentication.", "/versions/12/tables/0/rows/5/description": "String to append to the user name when forming the DN to bind as, when doing simple bind authentication.", "/versions/12/tables/0/rows/6/description": "Root DN to begin the search for the user in, when doing search+bind authentication.", "/versions/12/tables/0/rows/7/description": "DN of user to bind to the directory with to perform the search when doing search+bind authentication.", "/versions/12/tables/0/rows/8/description": "Password for user to bind to the directory with to perform the search when doing search+bind authentication.", "/versions/12/tables/0/rows/9/description": "Attribute to match against the user name in the search when doing search+bind authentication. If no attribute is specified, the uid attribute will be used.", "/versions/12/tables/0/rows/10/description": "The search filter to use when doing search+bind authentication. Occurrences of $username will be replaced with the user name. This allows for more flexible search filters than ldapsearchattribute .", "/versions/12/tables/0/rows/11/description": "An RFC 4516 LDAP URL. This is an alternative way to write some of the other LDAP options in a more compact and standard form. The format is ldap[s]:// host [: port ]/ basedn [?[ attribute ][?[ scope ][?[ filter ]]]] scope must be one of base , one , sub , typically the last. (The default is base , which is normally not useful in this application.) attribute can nominate a single attribute, in which case it is used as a value for ldapsearchattribute . If attribute is empty then filter can be used as a value for ldapsearchfilter . The URL scheme ldaps chooses the LDAPS method for making LDAP connections over SSL, equivalent to using ldapscheme=ldaps . To use encrypted LDAP connections using the StartTLS operation, use the normal URL scheme ldap and specify the ldaptls option in addition to ldapurl . For non-anonymous binds, ldapbinddn and ldapbindpasswd must be specified as separate options. LDAP URLs are currently only supported with OpenLDAP , not on Windows."}, "fallback_fields": [], "source_language": "en", "original_snapshot_sha256": "0d62e2b0c10f0b9200707236fa72ebce2a751b64ad2be013e0c69849f25fd89e", "canonical_center_text_hash": "c7a663cb0aaae0d9c63c8238324094706a38683617778f7e5106f21b25f32e6b"}, "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "comparison_data": {"method": "ldap", "documented_option_names": ["ldapbasedn", "ldapbinddn", "ldapbindpasswd", "ldapport", "ldapprefix", "ldapscheme", "ldapsearchattribute", "ldapsearchfilter", "ldapserver", "ldapsuffix", "ldaptls", "ldapurl"]}, "comparison_hash": "d40de945ae67b3ac60a284fdd442cc24a4e9d05bc7a7b18009b54e491c381b88", "manual_language": "zh", "description_zh_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u4f1a\u65ad\u5f00\u8fde\u63a5\uff0c\u518d\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u4e0e LDAP \u670d\u52a1\u5668\u5efa\u7acb\u4e24\u4e2a\u72ec\u7acb\u7684\u8fde\u63a5\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
"}, "13": {"facts": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u5b83\u4ee5\u66f4\u7d27\u51d1\u3001\u6807\u51c6\u7684\u5f62\u5f0f\u66ff\u4ee3\u90e8\u5206\u5176\u4ed6 LDAP \u9009\u9879\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "aliases": [], "related": [], "release": {"ref": "https://ftp.postgresql.org/pub/source/v13.23/postgresql-13.23.tar.bz2", "label": "13.23", "major": "13", "channel": "historical", "revision": "6ec3c82726af92b7dec873fa1cdf881eca92a4219787dfad05acb6b10e041fd6", "source_sha256": "6ec3c82726af92b7dec873fa1cdf881eca92a4219787dfad05acb6b10e041fd6", "catalog_fingerprint": "c7015c845255c9d721c547c8ab9ef37825d332588c9691d982e6906b7d571002"}, "sources": [{"url": "https://ftp.postgresql.org/pub/source/v13.23/postgresql-13.23.tar.bz2", "label": "Matching PostgreSQL source archive", "sha256": "6ec3c82726af92b7dec873fa1cdf881eca92a4219787dfad05acb6b10e041fd6"}, {"url": "/docs/13/auth-ldap.html", "path": "auth-ldap.html", "label": "PostgreSQL 13 English manual", "sha256": "2190e53484a909337f45b923753b310a993d15b4a763b83113945d2192cd8351"}, {"url": "/docs/13/auth-pg-hba-conf.html", "path": "auth-pg-hba-conf.html", "label": "PostgreSQL 13 English manual", "sha256": "3cc6ce851945cba450e6b26ecf9cae1efd3c03fb7b55e17876f4d9ea418a7c2e"}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/13/auth-ldap.html", "anchor": "", "locale": "zh-Hans", "version": "13", "build_id": 66, "page_key": "auth-ldap.html", "extraction": "concept-introduction", "source_hash": "4d6c6a8dfaa0b07b13ce72f9504556b72fc0fa98b41ad611311b487a1cc72276", "fragment_sha256": "ca833a54162cc61873fc217084dde9441f21482d2d11b3e3ef6d8a056e9566b0", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "snapshot:sha256:a13a825c39f0268ef1cfe9137e283e38d0da73b2d7894f0733c7b26372a4f6a4", "translated_from_revision": null}, "body_sha256": "3a83e40159223b6e8de0e9f7e39b3a5753b8d98a41f75ca9894cba49d5d6c7cc", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "6ec3c82726af92b7dec873fa1cdf881eca92a4219787dfad05acb6b10e041fd6"}, "facts_zh": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "sections": [], "center_zh": {"title": "ldap", "locale": "zh-Hans", "source": {"key": "ldap", "locale": "zh-Hans", "version": "13", "text_hash": "ff2ffafdd04178fd28ca563f0bef656ed9f78cd8ca3bc935d3446fc712dfa89a", "collection": "auth", "dataset_hash": "7c31b524dfe136022d39a6ae8dcfac6b3bbd5f8fdaf422536599981252aff0c9", "source_database": "center", "source_revision": "6ec3c82726af92b7dec873fa1cdf881eca92a4219787dfad05acb6b10e041fd6"}, "payload": {"facts": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u5b83\u4ee5\u66f4\u7d27\u51d1\u3001\u6807\u51c6\u7684\u5f62\u5f0f\u66ff\u4ee3\u90e8\u5206\u5176\u4ed6 LDAP \u9009\u9879\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/13/auth-ldap.html", "anchor": "", "locale": "zh-Hans", "version": "13", "build_id": 66, "page_key": "auth-ldap.html", "extraction": "concept-introduction", "source_hash": "4d6c6a8dfaa0b07b13ce72f9504556b72fc0fa98b41ad611311b487a1cc72276", "fragment_sha256": "ca833a54162cc61873fc217084dde9441f21482d2d11b3e3ef6d8a056e9566b0", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "snapshot:sha256:a13a825c39f0268ef1cfe9137e283e38d0da73b2d7894f0733c7b26372a4f6a4", "translated_from_revision": null}, "body_sha256": "3a83e40159223b6e8de0e9f7e39b3a5753b8d98a41f75ca9894cba49d5d6c7cc", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "6ec3c82726af92b7dec873fa1cdf881eca92a4219787dfad05acb6b10e041fd6"}, "sections": [], "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "description_zh_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u4f1a\u65ad\u5f00\u8fde\u63a5\uff0c\u518d\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u4e0e LDAP \u670d\u52a1\u5668\u5efa\u7acb\u4e24\u4e2a\u72ec\u7acb\u7684\u8fde\u63a5\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
"}, "summary": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "version": "13", "link_map": {"/zh/docs/13/auth-ldap.html": "/docs/13/auth-ldap.html"}, "body_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u4f1a\u65ad\u5f00\u8fde\u63a5\uff0c\u518d\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u4e0e LDAP \u670d\u52a1\u5668\u5efa\u7acb\u4e24\u4e2a\u72ec\u7acb\u7684\u8fde\u63a5\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
", "body_sha256": "94ba16357284208175a46e63ad53fd91fb669d7ddada3854607f44986c8d6d5a", "content_hash": "ff2ffafdd04178fd28ca563f0bef656ed9f78cd8ca3bc935d3446fc712dfa89a", "source_database": "center", "source_revision": "6ec3c82726af92b7dec873fa1cdf881eca92a4219787dfad05acb6b10e041fd6"}, "signature": "", "tables_zh": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u5b83\u4ee5\u66f4\u7d27\u51d1\u3001\u6807\u51c6\u7684\u5f62\u5f0f\u66ff\u4ee3\u90e8\u5206\u5176\u4ed6 LDAP \u9009\u9879\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "attributes": {"method": "ldap", "inventory": "User-visible source authentication method", "configuration": "pg_hba.conf"}, "description": ["\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002"], "manual_html": "", "manual_path": "/docs/13/auth-ldap.html", "sections_zh": [], "localization": {"status": "complete", "sources": [{"url": "/docs/13/auth-ldap.html", "method": "same-major semantic node", "sha256": "50e0bde9ab28266cb9d352e162c6f76e8d2de96085c9c633ab8cd4a043b509a7", "language": "zh", "matched_nodes": ["#AUTH-LDAP/div[0]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[0]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[2]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[4]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[5]", "#AUTH-LDAP/div[11]/dl[0]/dd[1]", "#AUTH-LDAP/div[11]/dl[0]/dd[3]", "#AUTH-LDAP/div[11]/dl[0]/dd[5]", "#AUTH-LDAP/div[11]/dl[0]/dd[7]", "#AUTH-LDAP/div[11]/dl[0]/dd[9]", "#AUTH-LDAP/div[28]/h3[0]", "#AUTH-LDAP/div[28]/p[1]", "#AUTH-LDAP/div[6]/dl[0]/dd[1]", "#AUTH-LDAP/div[6]/dl[0]/dd[3]", "#AUTH-LDAP/div[6]/dl[0]/dd[5]", "#AUTH-LDAP/div[9]/dl[0]/dd[1]", "#AUTH-LDAP/div[9]/dl[0]/dd[3]", "#AUTH-LDAP/p[10]", "#AUTH-LDAP/p[12]", "#AUTH-LDAP/p[13]", "#AUTH-LDAP/p[14]", "#AUTH-LDAP/p[15]", "#AUTH-LDAP/p[17]", "#AUTH-LDAP/p[18]", "#AUTH-LDAP/p[20]", "#AUTH-LDAP/p[21]", "#AUTH-LDAP/p[23]", "#AUTH-LDAP/p[24]", "#AUTH-LDAP/p[26]", "#AUTH-LDAP/p[2]", "#AUTH-LDAP/p[3]", "#AUTH-LDAP/p[4]", "#AUTH-LDAP/p[5]", "#AUTH-LDAP/p[7]", "#AUTH-LDAP/p[8]"]}], "language": "zh", "original_text": {"/versions/13/description/0": "Authenticate using an LDAP server. See Section 20.10 for details.", "/versions/13/facts/0/label": "Method", "/versions/13/facts/1/label": "Configuration", "/versions/13/facts/2/label": "Inventory", "/versions/13/facts/2/value": "User-visible source authentication method", "/versions/13/tables/0/title": "Documented method options and alternatives", "/versions/13/tables/0/columns/0/label": "Option or term", "/versions/13/tables/0/columns/1/label": "Meaning", "/versions/13/tables/0/rows/0/description": "Names or IP addresses of LDAP servers to connect to. Multiple servers may be specified, separated by spaces.", "/versions/13/tables/0/rows/1/description": "Port number on LDAP server to connect to. If no port is specified, the LDAP library's default port setting will be used.", "/versions/13/tables/0/rows/2/description": "Set to ldaps to use LDAPS. This is a non-standard way of using LDAP over SSL, supported by some LDAP server implementations. See also the ldaptls option for an alternative.", "/versions/13/tables/0/rows/3/description": "Set to 1 to make the connection between PostgreSQL and the LDAP server use TLS encryption. This uses the StartTLS operation per RFC 4513. See also the ldapscheme option for an alternative.", "/versions/13/tables/0/rows/4/description": "String to prepend to the user name when forming the DN to bind as, when doing simple bind authentication.", "/versions/13/tables/0/rows/5/description": "String to append to the user name when forming the DN to bind as, when doing simple bind authentication.", "/versions/13/tables/0/rows/6/description": "Root DN to begin the search for the user in, when doing search+bind authentication.", "/versions/13/tables/0/rows/7/description": "DN of user to bind to the directory with to perform the search when doing search+bind authentication.", "/versions/13/tables/0/rows/8/description": "Password for user to bind to the directory with to perform the search when doing search+bind authentication.", "/versions/13/tables/0/rows/9/description": "Attribute to match against the user name in the search when doing search+bind authentication. If no attribute is specified, the uid attribute will be used.", "/versions/13/tables/0/rows/10/description": "The search filter to use when doing search+bind authentication. Occurrences of $username will be replaced with the user name. This allows for more flexible search filters than ldapsearchattribute .", "/versions/13/tables/0/rows/11/description": "An RFC 4516 LDAP URL. This is an alternative way to write some of the other LDAP options in a more compact and standard form. The format is ldap[s]:// host [: port ]/ basedn [?[ attribute ][?[ scope ][?[ filter ]]]] scope must be one of base , one , sub , typically the last. (The default is base , which is normally not useful in this application.) attribute can nominate a single attribute, in which case it is used as a value for ldapsearchattribute . If attribute is empty then filter can be used as a value for ldapsearchfilter . The URL scheme ldaps chooses the LDAPS method for making LDAP connections over SSL, equivalent to using ldapscheme=ldaps . To use encrypted LDAP connections using the StartTLS operation, use the normal URL scheme ldap and specify the ldaptls option in addition to ldapurl . For non-anonymous binds, ldapbinddn and ldapbindpasswd must be specified as separate options. LDAP URLs are currently only supported with OpenLDAP , not on Windows."}, "fallback_fields": [], "source_language": "en", "original_snapshot_sha256": "03591237c516220407d694491b8c264cf8bcf29a3f7df2875045fb2cae699846", "canonical_center_text_hash": "ff2ffafdd04178fd28ca563f0bef656ed9f78cd8ca3bc935d3446fc712dfa89a"}, "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "comparison_data": {"method": "ldap", "documented_option_names": ["ldapbasedn", "ldapbinddn", "ldapbindpasswd", "ldapport", "ldapprefix", "ldapscheme", "ldapsearchattribute", "ldapsearchfilter", "ldapserver", "ldapsuffix", "ldaptls", "ldapurl"]}, "comparison_hash": "d40de945ae67b3ac60a284fdd442cc24a4e9d05bc7a7b18009b54e491c381b88", "manual_language": "zh", "description_zh_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u4f1a\u65ad\u5f00\u8fde\u63a5\uff0c\u518d\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u4e0e LDAP \u670d\u52a1\u5668\u5efa\u7acb\u4e24\u4e2a\u72ec\u7acb\u7684\u8fde\u63a5\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
"}, "14": {"facts": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u5b83\u4ee5\u66f4\u7d27\u51d1\u3001\u6807\u51c6\u7684\u5f62\u5f0f\u66ff\u4ee3\u90e8\u5206\u5176\u4ed6 LDAP \u9009\u9879\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "aliases": [], "related": [], "release": {"ref": "https://ftp.postgresql.org/pub/source/v14.24/postgresql-14.24.tar.bz2", "label": "14.24", "major": "14", "channel": "stable", "revision": "a7fa7ed3d558172355f51406097a7bd4f6b473be80f311ef7cda96bf383d8897", "source_sha256": "a7fa7ed3d558172355f51406097a7bd4f6b473be80f311ef7cda96bf383d8897", "catalog_fingerprint": "b272e6a82e4c46efda81c3a6a4cdf7de6a83dfff7f02f226a392fbe9acdd3adb"}, "sources": [{"url": "https://ftp.postgresql.org/pub/source/v14.24/postgresql-14.24.tar.bz2", "label": "Matching PostgreSQL source archive", "sha256": "a7fa7ed3d558172355f51406097a7bd4f6b473be80f311ef7cda96bf383d8897"}, {"url": "/docs/14/auth-ldap.html", "path": "auth-ldap.html", "label": "PostgreSQL 14 English manual", "sha256": "1e6edf4663135d54237da0efbc09280f32eae13c2c0e75ef29931356f244f440"}, {"url": "/docs/14/auth-pg-hba-conf.html", "path": "auth-pg-hba-conf.html", "label": "PostgreSQL 14 English manual", "sha256": "c9a75f04fd4a1069ea261ba061578a75c47a4b7e0bbf88761502fd4c19ccbc3f"}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/14/auth-ldap.html", "anchor": "", "locale": "zh-Hans", "version": "14", "build_id": 99, "page_key": "auth-ldap.html", "extraction": "concept-introduction", "source_hash": "6149c6bbf0f76a3cd400c83a55c6f97cd3bb2240b5078eb249d5e126d4d90fde", "fragment_sha256": "ca833a54162cc61873fc217084dde9441f21482d2d11b3e3ef6d8a056e9566b0", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:87e6aa4fd6e1ec85c5f4a6de4f5647cfd9e5de734ca2c266d32b6d6192c662ef", "translated_from_revision": null}, "body_sha256": "6801c45b0aa273e4e62d143d30f7e349e5d2ca671630d7df3ec577e48f677efb", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "a7fa7ed3d558172355f51406097a7bd4f6b473be80f311ef7cda96bf383d8897"}, "facts_zh": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "sections": [], "center_zh": {"title": "ldap", "locale": "zh-Hans", "source": {"key": "ldap", "locale": "zh-Hans", "version": "14", "text_hash": "362e320dbbb5465152728d7bf7b2e42d37c005ad02af3da0126fcf2786207181", "collection": "auth", "dataset_hash": "7c31b524dfe136022d39a6ae8dcfac6b3bbd5f8fdaf422536599981252aff0c9", "source_database": "center", "source_revision": "a7fa7ed3d558172355f51406097a7bd4f6b473be80f311ef7cda96bf383d8897"}, "payload": {"facts": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u5b83\u4ee5\u66f4\u7d27\u51d1\u3001\u6807\u51c6\u7684\u5f62\u5f0f\u66ff\u4ee3\u90e8\u5206\u5176\u4ed6 LDAP \u9009\u9879\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/14/auth-ldap.html", "anchor": "", "locale": "zh-Hans", "version": "14", "build_id": 99, "page_key": "auth-ldap.html", "extraction": "concept-introduction", "source_hash": "6149c6bbf0f76a3cd400c83a55c6f97cd3bb2240b5078eb249d5e126d4d90fde", "fragment_sha256": "ca833a54162cc61873fc217084dde9441f21482d2d11b3e3ef6d8a056e9566b0", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:87e6aa4fd6e1ec85c5f4a6de4f5647cfd9e5de734ca2c266d32b6d6192c662ef", "translated_from_revision": null}, "body_sha256": "6801c45b0aa273e4e62d143d30f7e349e5d2ca671630d7df3ec577e48f677efb", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "a7fa7ed3d558172355f51406097a7bd4f6b473be80f311ef7cda96bf383d8897"}, "sections": [], "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "description_zh_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u4f1a\u65ad\u5f00\u8fde\u63a5\uff0c\u518d\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u4e0e LDAP \u670d\u52a1\u5668\u5efa\u7acb\u4e24\u4e2a\u72ec\u7acb\u7684\u8fde\u63a5\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
"}, "summary": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "version": "14", "link_map": {"/zh/docs/14/auth-ldap.html": "/docs/14/auth-ldap.html"}, "body_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u4f1a\u65ad\u5f00\u8fde\u63a5\uff0c\u518d\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u4e0e LDAP \u670d\u52a1\u5668\u5efa\u7acb\u4e24\u4e2a\u72ec\u7acb\u7684\u8fde\u63a5\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
", "body_sha256": "b080396296b2e136e2b4f642b11a7e2c9adf0e64f6b19657393e06ea23ec3829", "content_hash": "362e320dbbb5465152728d7bf7b2e42d37c005ad02af3da0126fcf2786207181", "source_database": "center", "source_revision": "a7fa7ed3d558172355f51406097a7bd4f6b473be80f311ef7cda96bf383d8897"}, "signature": "", "tables_zh": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u5b83\u4ee5\u66f4\u7d27\u51d1\u3001\u6807\u51c6\u7684\u5f62\u5f0f\u66ff\u4ee3\u90e8\u5206\u5176\u4ed6 LDAP \u9009\u9879\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "attributes": {"method": "ldap", "inventory": "User-visible source authentication method", "configuration": "pg_hba.conf"}, "description": ["\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002"], "manual_html": "", "manual_path": "/docs/14/auth-ldap.html", "sections_zh": [], "localization": {"status": "complete", "sources": [{"url": "/docs/14/auth-ldap.html", "method": "same-major semantic node", "sha256": "3a4d284f0f020f4708fdcbe16010f3a25761a612aa125a9cfbb5a5c40e14808c", "language": "zh", "matched_nodes": ["#AUTH-LDAP/div[0]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[0]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[2]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[4]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[5]", "#AUTH-LDAP/div[11]/dl[0]/dd[1]", "#AUTH-LDAP/div[11]/dl[0]/dd[3]", "#AUTH-LDAP/div[11]/dl[0]/dd[5]", "#AUTH-LDAP/div[11]/dl[0]/dd[7]", "#AUTH-LDAP/div[11]/dl[0]/dd[9]", "#AUTH-LDAP/div[28]/h3[0]", "#AUTH-LDAP/div[28]/p[1]", "#AUTH-LDAP/div[6]/dl[0]/dd[1]", "#AUTH-LDAP/div[6]/dl[0]/dd[3]", "#AUTH-LDAP/div[6]/dl[0]/dd[5]", "#AUTH-LDAP/div[9]/dl[0]/dd[1]", "#AUTH-LDAP/div[9]/dl[0]/dd[3]", "#AUTH-LDAP/p[10]", "#AUTH-LDAP/p[12]", "#AUTH-LDAP/p[13]", "#AUTH-LDAP/p[14]", "#AUTH-LDAP/p[15]", "#AUTH-LDAP/p[17]", "#AUTH-LDAP/p[18]", "#AUTH-LDAP/p[20]", "#AUTH-LDAP/p[21]", "#AUTH-LDAP/p[23]", "#AUTH-LDAP/p[24]", "#AUTH-LDAP/p[26]", "#AUTH-LDAP/p[2]", "#AUTH-LDAP/p[3]", "#AUTH-LDAP/p[4]", "#AUTH-LDAP/p[5]", "#AUTH-LDAP/p[7]", "#AUTH-LDAP/p[8]"]}], "language": "zh", "original_text": {"/versions/14/description/0": "Authenticate using an LDAP server. See Section 21.10 for details.", "/versions/14/facts/0/label": "Method", "/versions/14/facts/1/label": "Configuration", "/versions/14/facts/2/label": "Inventory", "/versions/14/facts/2/value": "User-visible source authentication method", "/versions/14/tables/0/title": "Documented method options and alternatives", "/versions/14/tables/0/columns/0/label": "Option or term", "/versions/14/tables/0/columns/1/label": "Meaning", "/versions/14/tables/0/rows/0/description": "Names or IP addresses of LDAP servers to connect to. Multiple servers may be specified, separated by spaces.", "/versions/14/tables/0/rows/1/description": "Port number on LDAP server to connect to. If no port is specified, the LDAP library's default port setting will be used.", "/versions/14/tables/0/rows/2/description": "Set to ldaps to use LDAPS. This is a non-standard way of using LDAP over SSL, supported by some LDAP server implementations. See also the ldaptls option for an alternative.", "/versions/14/tables/0/rows/3/description": "Set to 1 to make the connection between PostgreSQL and the LDAP server use TLS encryption. This uses the StartTLS operation per RFC 4513 . See also the ldapscheme option for an alternative.", "/versions/14/tables/0/rows/4/description": "String to prepend to the user name when forming the DN to bind as, when doing simple bind authentication.", "/versions/14/tables/0/rows/5/description": "String to append to the user name when forming the DN to bind as, when doing simple bind authentication.", "/versions/14/tables/0/rows/6/description": "Root DN to begin the search for the user in, when doing search+bind authentication.", "/versions/14/tables/0/rows/7/description": "DN of user to bind to the directory with to perform the search when doing search+bind authentication.", "/versions/14/tables/0/rows/8/description": "Password for user to bind to the directory with to perform the search when doing search+bind authentication.", "/versions/14/tables/0/rows/9/description": "Attribute to match against the user name in the search when doing search+bind authentication. If no attribute is specified, the uid attribute will be used.", "/versions/14/tables/0/rows/10/description": "The search filter to use when doing search+bind authentication. Occurrences of $username will be replaced with the user name. This allows for more flexible search filters than ldapsearchattribute .", "/versions/14/tables/0/rows/11/description": "An RFC 4516 LDAP URL. This is an alternative way to write some of the other LDAP options in a more compact and standard form. The format is ldap[s]:// host [: port ]/ basedn [?[ attribute ][?[ scope ][?[ filter ]]]] scope must be one of base , one , sub , typically the last. (The default is base , which is normally not useful in this application.) attribute can nominate a single attribute, in which case it is used as a value for ldapsearchattribute . If attribute is empty then filter can be used as a value for ldapsearchfilter . The URL scheme ldaps chooses the LDAPS method for making LDAP connections over SSL, equivalent to using ldapscheme=ldaps . To use encrypted LDAP connections using the StartTLS operation, use the normal URL scheme ldap and specify the ldaptls option in addition to ldapurl . For non-anonymous binds, ldapbinddn and ldapbindpasswd must be specified as separate options. LDAP URLs are currently only supported with OpenLDAP , not on Windows."}, "fallback_fields": [], "source_language": "en", "original_snapshot_sha256": "0bf2f56ca41386b3b571a4c19e36f13589e924e6a150d8f11bbfa975d6c75436", "canonical_center_text_hash": "362e320dbbb5465152728d7bf7b2e42d37c005ad02af3da0126fcf2786207181"}, "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "comparison_data": {"method": "ldap", "documented_option_names": ["ldapbasedn", "ldapbinddn", "ldapbindpasswd", "ldapport", "ldapprefix", "ldapscheme", "ldapsearchattribute", "ldapsearchfilter", "ldapserver", "ldapsuffix", "ldaptls", "ldapurl"]}, "comparison_hash": "d40de945ae67b3ac60a284fdd442cc24a4e9d05bc7a7b18009b54e491c381b88", "manual_language": "zh", "description_zh_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u4f1a\u65ad\u5f00\u8fde\u63a5\uff0c\u518d\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u4e0e LDAP \u670d\u52a1\u5668\u5efa\u7acb\u4e24\u4e2a\u72ec\u7acb\u7684\u8fde\u63a5\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
"}, "15": {"facts": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u5b83\u4ee5\u66f4\u7d27\u51d1\u3001\u6807\u51c6\u7684\u5f62\u5f0f\u66ff\u4ee3\u90e8\u5206\u5176\u4ed6 LDAP \u9009\u9879\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "aliases": [], "related": [], "release": {"ref": "https://ftp.postgresql.org/pub/source/v15.19/postgresql-15.19.tar.bz2", "label": "15.19", "major": "15", "channel": "stable", "revision": "e1a64a87a46b825b88c082e4518161a47aab53c45694964f8ba1df28f7859f89", "source_sha256": "e1a64a87a46b825b88c082e4518161a47aab53c45694964f8ba1df28f7859f89", "catalog_fingerprint": "fefe3c425147a86defada190c9b0663cfe02caa1724f5dede93e46457572252d"}, "sources": [{"url": "https://ftp.postgresql.org/pub/source/v15.19/postgresql-15.19.tar.bz2", "label": "Matching PostgreSQL source archive", "sha256": "e1a64a87a46b825b88c082e4518161a47aab53c45694964f8ba1df28f7859f89"}, {"url": "/docs/15/auth-ldap.html", "path": "auth-ldap.html", "label": "PostgreSQL 15 English manual", "sha256": "f355c23a666075dc2968875e229ebead4f0d113db4944f61a5ade70f5f496e9f"}, {"url": "/docs/15/auth-pg-hba-conf.html", "path": "auth-pg-hba-conf.html", "label": "PostgreSQL 15 English manual", "sha256": "0470cd3eeb82cbc32d4b8b79e29f4427bdfd01f5bb15e6d9b7cee2f6dd2bba44"}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/15/auth-ldap.html", "anchor": "", "locale": "zh-Hans", "version": "15", "build_id": 101, "page_key": "auth-ldap.html", "extraction": "concept-introduction", "source_hash": "cedf8ad0f28e0ef50471c7f921c6b94768f8bb596c961da67e2e31150891e9a9", "fragment_sha256": "ca833a54162cc61873fc217084dde9441f21482d2d11b3e3ef6d8a056e9566b0", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:6bce1a2df9170cb1146a1411c5547190856638221a6539e618ee1016c9f493ad", "translated_from_revision": null}, "body_sha256": "1a77cf68f9f00405dfb9cf2e7ec13217d4a00d7fce52a00d803764e30f85f5f0", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "e1a64a87a46b825b88c082e4518161a47aab53c45694964f8ba1df28f7859f89"}, "facts_zh": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "sections": [], "center_zh": {"title": "ldap", "locale": "zh-Hans", "source": {"key": "ldap", "locale": "zh-Hans", "version": "15", "text_hash": "fc8119512e75627cb433ac37d1e134a715d1a818c4e2d01e025db701675ce38e", "collection": "auth", "dataset_hash": "7c31b524dfe136022d39a6ae8dcfac6b3bbd5f8fdaf422536599981252aff0c9", "source_database": "center", "source_revision": "e1a64a87a46b825b88c082e4518161a47aab53c45694964f8ba1df28f7859f89"}, "payload": {"facts": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u5b83\u4ee5\u66f4\u7d27\u51d1\u3001\u6807\u51c6\u7684\u5f62\u5f0f\u66ff\u4ee3\u90e8\u5206\u5176\u4ed6 LDAP \u9009\u9879\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/15/auth-ldap.html", "anchor": "", "locale": "zh-Hans", "version": "15", "build_id": 101, "page_key": "auth-ldap.html", "extraction": "concept-introduction", "source_hash": "cedf8ad0f28e0ef50471c7f921c6b94768f8bb596c961da67e2e31150891e9a9", "fragment_sha256": "ca833a54162cc61873fc217084dde9441f21482d2d11b3e3ef6d8a056e9566b0", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:6bce1a2df9170cb1146a1411c5547190856638221a6539e618ee1016c9f493ad", "translated_from_revision": null}, "body_sha256": "1a77cf68f9f00405dfb9cf2e7ec13217d4a00d7fce52a00d803764e30f85f5f0", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "e1a64a87a46b825b88c082e4518161a47aab53c45694964f8ba1df28f7859f89"}, "sections": [], "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "description_zh_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u4f1a\u65ad\u5f00\u8fde\u63a5\uff0c\u518d\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u4e0e LDAP \u670d\u52a1\u5668\u5efa\u7acb\u4e24\u4e2a\u72ec\u7acb\u7684\u8fde\u63a5\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
"}, "summary": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "version": "15", "link_map": {"/zh/docs/15/auth-ldap.html": "/docs/15/auth-ldap.html"}, "body_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u4f1a\u65ad\u5f00\u8fde\u63a5\uff0c\u518d\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u4e0e LDAP \u670d\u52a1\u5668\u5efa\u7acb\u4e24\u4e2a\u72ec\u7acb\u7684\u8fde\u63a5\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
", "body_sha256": "ce01931088133fedcda04c81c2680d345125530bb5ddfc8dd68706d0d33bd76f", "content_hash": "fc8119512e75627cb433ac37d1e134a715d1a818c4e2d01e025db701675ce38e", "source_database": "center", "source_revision": "e1a64a87a46b825b88c082e4518161a47aab53c45694964f8ba1df28f7859f89"}, "signature": "", "tables_zh": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u5b83\u4ee5\u66f4\u7d27\u51d1\u3001\u6807\u51c6\u7684\u5f62\u5f0f\u66ff\u4ee3\u90e8\u5206\u5176\u4ed6 LDAP \u9009\u9879\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "attributes": {"method": "ldap", "inventory": "User-visible source authentication method", "configuration": "pg_hba.conf"}, "description": ["\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002"], "manual_html": "", "manual_path": "/docs/15/auth-ldap.html", "sections_zh": [], "localization": {"status": "complete", "sources": [{"url": "/docs/15/auth-ldap.html", "method": "same-major semantic node", "sha256": "1fb6d6d20d0a96d0108aac8e0bd4dbb4732fe3f1631c208968b4afeb0bcd32a3", "language": "zh", "matched_nodes": ["#AUTH-LDAP/div[0]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[0]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[2]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[4]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[5]", "#AUTH-LDAP/div[11]/dl[0]/dd[1]", "#AUTH-LDAP/div[11]/dl[0]/dd[3]", "#AUTH-LDAP/div[11]/dl[0]/dd[5]", "#AUTH-LDAP/div[11]/dl[0]/dd[7]", "#AUTH-LDAP/div[11]/dl[0]/dd[9]", "#AUTH-LDAP/div[28]/h3[0]", "#AUTH-LDAP/div[28]/p[1]", "#AUTH-LDAP/div[6]/dl[0]/dd[1]", "#AUTH-LDAP/div[6]/dl[0]/dd[3]", "#AUTH-LDAP/div[6]/dl[0]/dd[5]", "#AUTH-LDAP/div[9]/dl[0]/dd[1]", "#AUTH-LDAP/div[9]/dl[0]/dd[3]", "#AUTH-LDAP/p[10]", "#AUTH-LDAP/p[12]", "#AUTH-LDAP/p[13]", "#AUTH-LDAP/p[14]", "#AUTH-LDAP/p[15]", "#AUTH-LDAP/p[17]", "#AUTH-LDAP/p[18]", "#AUTH-LDAP/p[20]", "#AUTH-LDAP/p[21]", "#AUTH-LDAP/p[23]", "#AUTH-LDAP/p[24]", "#AUTH-LDAP/p[26]", "#AUTH-LDAP/p[2]", "#AUTH-LDAP/p[3]", "#AUTH-LDAP/p[4]", "#AUTH-LDAP/p[5]", "#AUTH-LDAP/p[7]", "#AUTH-LDAP/p[8]"]}], "language": "zh", "original_text": {"/versions/15/description/0": "Authenticate using an LDAP server. See Section 21.10 for details.", "/versions/15/facts/0/label": "Method", "/versions/15/facts/1/label": "Configuration", "/versions/15/facts/2/label": "Inventory", "/versions/15/facts/2/value": "User-visible source authentication method", "/versions/15/tables/0/title": "Documented method options and alternatives", "/versions/15/tables/0/columns/0/label": "Option or term", "/versions/15/tables/0/columns/1/label": "Meaning", "/versions/15/tables/0/rows/0/description": "Names or IP addresses of LDAP servers to connect to. Multiple servers may be specified, separated by spaces.", "/versions/15/tables/0/rows/1/description": "Port number on LDAP server to connect to. If no port is specified, the LDAP library's default port setting will be used.", "/versions/15/tables/0/rows/2/description": "Set to ldaps to use LDAPS. This is a non-standard way of using LDAP over SSL, supported by some LDAP server implementations. See also the ldaptls option for an alternative.", "/versions/15/tables/0/rows/3/description": "Set to 1 to make the connection between PostgreSQL and the LDAP server use TLS encryption. This uses the StartTLS operation per RFC 4513 . See also the ldapscheme option for an alternative.", "/versions/15/tables/0/rows/4/description": "String to prepend to the user name when forming the DN to bind as, when doing simple bind authentication.", "/versions/15/tables/0/rows/5/description": "String to append to the user name when forming the DN to bind as, when doing simple bind authentication.", "/versions/15/tables/0/rows/6/description": "Root DN to begin the search for the user in, when doing search+bind authentication.", "/versions/15/tables/0/rows/7/description": "DN of user to bind to the directory with to perform the search when doing search+bind authentication.", "/versions/15/tables/0/rows/8/description": "Password for user to bind to the directory with to perform the search when doing search+bind authentication.", "/versions/15/tables/0/rows/9/description": "Attribute to match against the user name in the search when doing search+bind authentication. If no attribute is specified, the uid attribute will be used.", "/versions/15/tables/0/rows/10/description": "The search filter to use when doing search+bind authentication. Occurrences of $username will be replaced with the user name. This allows for more flexible search filters than ldapsearchattribute .", "/versions/15/tables/0/rows/11/description": "An RFC 4516 LDAP URL. This is an alternative way to write some of the other LDAP options in a more compact and standard form. The format is ldap[s]:// host [: port ]/ basedn [?[ attribute ][?[ scope ][?[ filter ]]]] scope must be one of base , one , sub , typically the last. (The default is base , which is normally not useful in this application.) attribute can nominate a single attribute, in which case it is used as a value for ldapsearchattribute . If attribute is empty then filter can be used as a value for ldapsearchfilter . The URL scheme ldaps chooses the LDAPS method for making LDAP connections over SSL, equivalent to using ldapscheme=ldaps . To use encrypted LDAP connections using the StartTLS operation, use the normal URL scheme ldap and specify the ldaptls option in addition to ldapurl . For non-anonymous binds, ldapbinddn and ldapbindpasswd must be specified as separate options. LDAP URLs are currently only supported with OpenLDAP , not on Windows."}, "fallback_fields": [], "source_language": "en", "original_snapshot_sha256": "646c5de13090f1591beff23ec8095e3892e0f2c929ab6a2f7781fbd8cc3ddc42", "canonical_center_text_hash": "fc8119512e75627cb433ac37d1e134a715d1a818c4e2d01e025db701675ce38e"}, "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "comparison_data": {"method": "ldap", "documented_option_names": ["ldapbasedn", "ldapbinddn", "ldapbindpasswd", "ldapport", "ldapprefix", "ldapscheme", "ldapsearchattribute", "ldapsearchfilter", "ldapserver", "ldapsuffix", "ldaptls", "ldapurl"]}, "comparison_hash": "d40de945ae67b3ac60a284fdd442cc24a4e9d05bc7a7b18009b54e491c381b88", "manual_language": "zh", "description_zh_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u4f1a\u65ad\u5f00\u8fde\u63a5\uff0c\u518d\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u4e0e LDAP \u670d\u52a1\u5668\u5efa\u7acb\u4e24\u4e2a\u72ec\u7acb\u7684\u8fde\u63a5\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
"}, "16": {"facts": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u5b83\u4ee5\u66f4\u7d27\u51d1\u3001\u6807\u51c6\u7684\u5f62\u5f0f\u66ff\u4ee3\u90e8\u5206\u5176\u4ed6 LDAP \u9009\u9879\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "aliases": [], "related": [], "release": {"ref": "https://ftp.postgresql.org/pub/source/v16.15/postgresql-16.15.tar.bz2", "label": "16.15", "major": "16", "channel": "stable", "revision": "c1575341fa7bd40f5274ea465b34390f4dc64cdd0770af327005caaeb9f6b7ed", "source_sha256": "c1575341fa7bd40f5274ea465b34390f4dc64cdd0770af327005caaeb9f6b7ed", "catalog_fingerprint": "fa133458dc8f52e15083b4f59b7a582e2e378b608d3ac5c53054df458a374e23"}, "sources": [{"url": "https://ftp.postgresql.org/pub/source/v16.15/postgresql-16.15.tar.bz2", "label": "Matching PostgreSQL source archive", "sha256": "c1575341fa7bd40f5274ea465b34390f4dc64cdd0770af327005caaeb9f6b7ed"}, {"url": "/docs/16/auth-ldap.html", "path": "auth-ldap.html", "label": "PostgreSQL 16 English manual", "sha256": "dd667e5c2ce6cb14df859d3da34720144c888a8f3b8d443d789343e538c5e94a"}, {"url": "/docs/16/auth-pg-hba-conf.html", "path": "auth-pg-hba-conf.html", "label": "PostgreSQL 16 English manual", "sha256": "ccc5146375a184646d5992edbc693e12c0de4431a35141d6b56c8dd6b3c52132"}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/16/auth-ldap.html", "anchor": "", "locale": "zh-Hans", "version": "16", "build_id": 103, "page_key": "auth-ldap.html", "extraction": "concept-introduction", "source_hash": "53378f6ad3f985efa5a5480c4feb5597f4f621cc6d2a6d2ff5db71e19b98cc73", "fragment_sha256": "ca833a54162cc61873fc217084dde9441f21482d2d11b3e3ef6d8a056e9566b0", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:80579a071736780f9c4022bb5148e1fb1256f1a33591306af67816e9e9bf3a9b", "translated_from_revision": null}, "body_sha256": "d7a3216931f3cf29b34d895fee07c237069b82d11b3b3f836ee241b7d236d162", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "c1575341fa7bd40f5274ea465b34390f4dc64cdd0770af327005caaeb9f6b7ed"}, "facts_zh": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "sections": [], "center_zh": {"title": "ldap", "locale": "zh-Hans", "source": {"key": "ldap", "locale": "zh-Hans", "version": "16", "text_hash": "607a668307b98b06c1fac2038d01f9b27152b79851eda6d83528eaca5f493dc0", "collection": "auth", "dataset_hash": "7c31b524dfe136022d39a6ae8dcfac6b3bbd5f8fdaf422536599981252aff0c9", "source_database": "center", "source_revision": "c1575341fa7bd40f5274ea465b34390f4dc64cdd0770af327005caaeb9f6b7ed"}, "payload": {"facts": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u5b83\u4ee5\u66f4\u7d27\u51d1\u3001\u6807\u51c6\u7684\u5f62\u5f0f\u66ff\u4ee3\u90e8\u5206\u5176\u4ed6 LDAP \u9009\u9879\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/16/auth-ldap.html", "anchor": "", "locale": "zh-Hans", "version": "16", "build_id": 103, "page_key": "auth-ldap.html", "extraction": "concept-introduction", "source_hash": "53378f6ad3f985efa5a5480c4feb5597f4f621cc6d2a6d2ff5db71e19b98cc73", "fragment_sha256": "ca833a54162cc61873fc217084dde9441f21482d2d11b3e3ef6d8a056e9566b0", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:80579a071736780f9c4022bb5148e1fb1256f1a33591306af67816e9e9bf3a9b", "translated_from_revision": null}, "body_sha256": "d7a3216931f3cf29b34d895fee07c237069b82d11b3b3f836ee241b7d236d162", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "c1575341fa7bd40f5274ea465b34390f4dc64cdd0770af327005caaeb9f6b7ed"}, "sections": [], "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "description_zh_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u4f1a\u65ad\u5f00\u8fde\u63a5\uff0c\u518d\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u4e0e LDAP \u670d\u52a1\u5668\u5efa\u7acb\u4e24\u4e2a\u72ec\u7acb\u7684\u8fde\u63a5\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
"}, "summary": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "version": "16", "link_map": {"/zh/docs/16/auth-ldap.html": "/docs/16/auth-ldap.html"}, "body_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u4f1a\u65ad\u5f00\u8fde\u63a5\uff0c\u518d\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u4e0e LDAP \u670d\u52a1\u5668\u5efa\u7acb\u4e24\u4e2a\u72ec\u7acb\u7684\u8fde\u63a5\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
", "body_sha256": "4979002f2bdbfc64e21b261c9b579a0efc6d2ab7e8d684081e9f55f803626abc", "content_hash": "607a668307b98b06c1fac2038d01f9b27152b79851eda6d83528eaca5f493dc0", "source_database": "center", "source_revision": "c1575341fa7bd40f5274ea465b34390f4dc64cdd0770af327005caaeb9f6b7ed"}, "signature": "", "tables_zh": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u5b83\u4ee5\u66f4\u7d27\u51d1\u3001\u6807\u51c6\u7684\u5f62\u5f0f\u66ff\u4ee3\u90e8\u5206\u5176\u4ed6 LDAP \u9009\u9879\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "attributes": {"method": "ldap", "inventory": "User-visible source authentication method", "configuration": "pg_hba.conf"}, "description": ["\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002"], "manual_html": "", "manual_path": "/docs/16/auth-ldap.html", "sections_zh": [], "localization": {"status": "complete", "sources": [{"url": "/docs/16/auth-ldap.html", "method": "same-major semantic node", "sha256": "fee5f923817f48252d31b99047b4ded6e818d16da9a4573e8d5c2d8b2d4022e3", "language": "zh", "matched_nodes": ["#AUTH-LDAP/div[0]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[0]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[2]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[4]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[5]", "#AUTH-LDAP/div[11]/dl[0]/dd[1]", "#AUTH-LDAP/div[11]/dl[0]/dd[3]", "#AUTH-LDAP/div[11]/dl[0]/dd[5]", "#AUTH-LDAP/div[11]/dl[0]/dd[7]", "#AUTH-LDAP/div[11]/dl[0]/dd[9]", "#AUTH-LDAP/div[28]/h3[0]", "#AUTH-LDAP/div[28]/p[1]", "#AUTH-LDAP/div[6]/dl[0]/dd[1]", "#AUTH-LDAP/div[6]/dl[0]/dd[3]", "#AUTH-LDAP/div[6]/dl[0]/dd[5]", "#AUTH-LDAP/div[9]/dl[0]/dd[1]", "#AUTH-LDAP/div[9]/dl[0]/dd[3]", "#AUTH-LDAP/p[10]", "#AUTH-LDAP/p[12]", "#AUTH-LDAP/p[13]", "#AUTH-LDAP/p[14]", "#AUTH-LDAP/p[15]", "#AUTH-LDAP/p[17]", "#AUTH-LDAP/p[18]", "#AUTH-LDAP/p[20]", "#AUTH-LDAP/p[21]", "#AUTH-LDAP/p[23]", "#AUTH-LDAP/p[24]", "#AUTH-LDAP/p[26]", "#AUTH-LDAP/p[2]", "#AUTH-LDAP/p[3]", "#AUTH-LDAP/p[4]", "#AUTH-LDAP/p[5]", "#AUTH-LDAP/p[7]", "#AUTH-LDAP/p[8]"]}], "language": "zh", "original_text": {"/versions/16/description/0": "Authenticate using an LDAP server. See Section 21.10 for details.", "/versions/16/facts/0/label": "Method", "/versions/16/facts/1/label": "Configuration", "/versions/16/facts/2/label": "Inventory", "/versions/16/facts/2/value": "User-visible source authentication method", "/versions/16/tables/0/title": "Documented method options and alternatives", "/versions/16/tables/0/columns/0/label": "Option or term", "/versions/16/tables/0/columns/1/label": "Meaning", "/versions/16/tables/0/rows/0/description": "Names or IP addresses of LDAP servers to connect to. Multiple servers may be specified, separated by spaces.", "/versions/16/tables/0/rows/1/description": "Port number on LDAP server to connect to. If no port is specified, the LDAP library's default port setting will be used.", "/versions/16/tables/0/rows/2/description": "Set to ldaps to use LDAPS. This is a non-standard way of using LDAP over SSL, supported by some LDAP server implementations. See also the ldaptls option for an alternative.", "/versions/16/tables/0/rows/3/description": "Set to 1 to make the connection between PostgreSQL and the LDAP server use TLS encryption. This uses the StartTLS operation per RFC 4513 . See also the ldapscheme option for an alternative.", "/versions/16/tables/0/rows/4/description": "String to prepend to the user name when forming the DN to bind as, when doing simple bind authentication.", "/versions/16/tables/0/rows/5/description": "String to append to the user name when forming the DN to bind as, when doing simple bind authentication.", "/versions/16/tables/0/rows/6/description": "Root DN to begin the search for the user in, when doing search+bind authentication.", "/versions/16/tables/0/rows/7/description": "DN of user to bind to the directory with to perform the search when doing search+bind authentication.", "/versions/16/tables/0/rows/8/description": "Password for user to bind to the directory with to perform the search when doing search+bind authentication.", "/versions/16/tables/0/rows/9/description": "Attribute to match against the user name in the search when doing search+bind authentication. If no attribute is specified, the uid attribute will be used.", "/versions/16/tables/0/rows/10/description": "The search filter to use when doing search+bind authentication. Occurrences of $username will be replaced with the user name. This allows for more flexible search filters than ldapsearchattribute .", "/versions/16/tables/0/rows/11/description": "An RFC 4516 LDAP URL. This is an alternative way to write some of the other LDAP options in a more compact and standard form. The format is ldap[s]:// host [: port ]/ basedn [?[ attribute ][?[ scope ][?[ filter ]]]] scope must be one of base , one , sub , typically the last. (The default is base , which is normally not useful in this application.) attribute can nominate a single attribute, in which case it is used as a value for ldapsearchattribute . If attribute is empty then filter can be used as a value for ldapsearchfilter . The URL scheme ldaps chooses the LDAPS method for making LDAP connections over SSL, equivalent to using ldapscheme=ldaps . To use encrypted LDAP connections using the StartTLS operation, use the normal URL scheme ldap and specify the ldaptls option in addition to ldapurl . For non-anonymous binds, ldapbinddn and ldapbindpasswd must be specified as separate options. LDAP URLs are currently only supported with OpenLDAP , not on Windows."}, "fallback_fields": [], "source_language": "en", "original_snapshot_sha256": "56e068ba1f0d16582d393e22f5861a42d647e1d0ab08715f2e4f1cb2c57f3989", "canonical_center_text_hash": "607a668307b98b06c1fac2038d01f9b27152b79851eda6d83528eaca5f493dc0"}, "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "comparison_data": {"method": "ldap", "documented_option_names": ["ldapbasedn", "ldapbinddn", "ldapbindpasswd", "ldapport", "ldapprefix", "ldapscheme", "ldapsearchattribute", "ldapsearchfilter", "ldapserver", "ldapsuffix", "ldaptls", "ldapurl"]}, "comparison_hash": "d40de945ae67b3ac60a284fdd442cc24a4e9d05bc7a7b18009b54e491c381b88", "manual_language": "zh", "description_zh_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u4f1a\u65ad\u5f00\u8fde\u63a5\uff0c\u518d\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u4e0e LDAP \u670d\u52a1\u5668\u5efa\u7acb\u4e24\u4e2a\u72ec\u7acb\u7684\u8fde\u63a5\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
"}, "17": {"facts": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u5b83\u4ee5\u66f4\u7d27\u51d1\u3001\u6807\u51c6\u7684\u5f62\u5f0f\u66ff\u4ee3\u90e8\u5206\u5176\u4ed6 LDAP \u9009\u9879\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "aliases": [], "related": [], "release": {"ref": "https://ftp.postgresql.org/pub/source/v17.11/postgresql-17.11.tar.bz2", "label": "17.11", "major": "17", "channel": "stable", "revision": "dd27f2b3c59e73ed14aa3324901242bf69a032a6347805f274e6260322d42979", "source_sha256": "dd27f2b3c59e73ed14aa3324901242bf69a032a6347805f274e6260322d42979", "catalog_fingerprint": "4bbe3ac77becd618478f66aec420a533e9017be356c5c1d51a4b17f0fd497c07"}, "sources": [{"url": "https://ftp.postgresql.org/pub/source/v17.11/postgresql-17.11.tar.bz2", "label": "Matching PostgreSQL source archive", "sha256": "dd27f2b3c59e73ed14aa3324901242bf69a032a6347805f274e6260322d42979"}, {"url": "/docs/17/auth-ldap.html", "path": "auth-ldap.html", "label": "PostgreSQL 17 English manual", "sha256": "1d4c4c0be025c634cba458a751de54b97831a71c8380adc23d7c02c75c855a59"}, {"url": "/docs/17/auth-pg-hba-conf.html", "path": "auth-pg-hba-conf.html", "label": "PostgreSQL 17 English manual", "sha256": "00c7a7c25d46aa1b2f24cd744cd4990ca4218cfafed2a4cab8c1dc1092090bba"}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/17/auth-ldap.html", "anchor": "", "locale": "zh-Hans", "version": "17", "build_id": 105, "page_key": "auth-ldap.html", "extraction": "concept-introduction", "source_hash": "9fb18a6ad0a2c30d8e9f863a41a3f95d3bfb7c887509f2e4b263fd1606650465", "fragment_sha256": "ade9ede427d8c1521a1f2fe149790aadb3980c44e0d8d901a5ed7f396015e0af", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:7340767258d21c21b36f373f1fff6bab2be18e0daca13a865129db6105c09efd", "translated_from_revision": null}, "body_sha256": "abafdba7f3df6c7871181e48d9221e0c386dc00f88a2f9661d963f10ac9fcf30", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "dd27f2b3c59e73ed14aa3324901242bf69a032a6347805f274e6260322d42979"}, "facts_zh": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "sections": [], "center_zh": {"title": "ldap", "locale": "zh-Hans", "source": {"key": "ldap", "locale": "zh-Hans", "version": "17", "text_hash": "550ef9ff231b59754b61e1f2d4cb82b0163c3c85eb4ec00a8a225085c72583c9", "collection": "auth", "dataset_hash": "7c31b524dfe136022d39a6ae8dcfac6b3bbd5f8fdaf422536599981252aff0c9", "source_database": "center", "source_revision": "dd27f2b3c59e73ed14aa3324901242bf69a032a6347805f274e6260322d42979"}, "payload": {"facts": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u5b83\u4ee5\u66f4\u7d27\u51d1\u3001\u6807\u51c6\u7684\u5f62\u5f0f\u66ff\u4ee3\u90e8\u5206\u5176\u4ed6 LDAP \u9009\u9879\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/17/auth-ldap.html", "anchor": "", "locale": "zh-Hans", "version": "17", "build_id": 105, "page_key": "auth-ldap.html", "extraction": "concept-introduction", "source_hash": "9fb18a6ad0a2c30d8e9f863a41a3f95d3bfb7c887509f2e4b263fd1606650465", "fragment_sha256": "ade9ede427d8c1521a1f2fe149790aadb3980c44e0d8d901a5ed7f396015e0af", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:7340767258d21c21b36f373f1fff6bab2be18e0daca13a865129db6105c09efd", "translated_from_revision": null}, "body_sha256": "abafdba7f3df6c7871181e48d9221e0c386dc00f88a2f9661d963f10ac9fcf30", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "dd27f2b3c59e73ed14aa3324901242bf69a032a6347805f274e6260322d42979"}, "sections": [], "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "description_zh_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u5c31\u4f1a\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u5bf9 LDAP \u670d\u52a1\u5668\u989d\u5916\u53d1\u8d77\u4e24\u6b21\u8bf7\u6c42\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
"}, "summary": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "version": "17", "link_map": {"/zh/docs/17/auth-ldap.html": "/docs/17/auth-ldap.html"}, "body_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u5c31\u4f1a\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u5bf9 LDAP \u670d\u52a1\u5668\u989d\u5916\u53d1\u8d77\u4e24\u6b21\u8bf7\u6c42\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
", "body_sha256": "61cf8656bff4929f88327b1fb001497b479b7576646c7290df069ee0764a62af", "content_hash": "550ef9ff231b59754b61e1f2d4cb82b0163c3c85eb4ec00a8a225085c72583c9", "source_database": "center", "source_revision": "dd27f2b3c59e73ed14aa3324901242bf69a032a6347805f274e6260322d42979"}, "signature": "", "tables_zh": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u5b83\u4ee5\u66f4\u7d27\u51d1\u3001\u6807\u51c6\u7684\u5f62\u5f0f\u66ff\u4ee3\u90e8\u5206\u5176\u4ed6 LDAP \u9009\u9879\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "attributes": {"method": "ldap", "inventory": "User-visible source authentication method", "configuration": "pg_hba.conf"}, "description": ["\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002"], "manual_html": "", "manual_path": "/docs/17/auth-ldap.html", "sections_zh": [], "localization": {"status": "complete", "sources": [{"url": "/docs/17/auth-ldap.html", "method": "same-major semantic node", "sha256": "db1d99195ec0188e3bceecf9327fb85c9f9fa90c83d1d92e84e7203d13d51524", "language": "zh", "matched_nodes": ["#AUTH-LDAP/div[0]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[0]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[2]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[4]", "#AUTH-LDAP/div[11]/dl[0]/dd[11]/p[5]", "#AUTH-LDAP/div[11]/dl[0]/dd[1]", "#AUTH-LDAP/div[11]/dl[0]/dd[3]", "#AUTH-LDAP/div[11]/dl[0]/dd[5]", "#AUTH-LDAP/div[11]/dl[0]/dd[7]", "#AUTH-LDAP/div[11]/dl[0]/dd[9]", "#AUTH-LDAP/div[28]/h3[0]", "#AUTH-LDAP/div[28]/p[1]", "#AUTH-LDAP/div[6]/dl[0]/dd[1]", "#AUTH-LDAP/div[6]/dl[0]/dd[3]", "#AUTH-LDAP/div[6]/dl[0]/dd[5]", "#AUTH-LDAP/div[9]/dl[0]/dd[1]", "#AUTH-LDAP/div[9]/dl[0]/dd[3]", "#AUTH-LDAP/p[10]", "#AUTH-LDAP/p[12]", "#AUTH-LDAP/p[13]", "#AUTH-LDAP/p[14]", "#AUTH-LDAP/p[15]", "#AUTH-LDAP/p[17]", "#AUTH-LDAP/p[18]", "#AUTH-LDAP/p[20]", "#AUTH-LDAP/p[21]", "#AUTH-LDAP/p[23]", "#AUTH-LDAP/p[24]", "#AUTH-LDAP/p[26]", "#AUTH-LDAP/p[2]", "#AUTH-LDAP/p[3]", "#AUTH-LDAP/p[4]", "#AUTH-LDAP/p[5]", "#AUTH-LDAP/p[7]", "#AUTH-LDAP/p[8]"]}], "language": "zh", "original_text": {"/versions/17/description/0": "Authenticate using an LDAP server. See Section 20.10 for details.", "/versions/17/facts/0/label": "Method", "/versions/17/facts/1/label": "Configuration", "/versions/17/facts/2/label": "Inventory", "/versions/17/facts/2/value": "User-visible source authentication method", "/versions/17/tables/0/title": "Documented method options and alternatives", "/versions/17/tables/0/columns/0/label": "Option or term", "/versions/17/tables/0/columns/1/label": "Meaning", "/versions/17/tables/0/rows/0/description": "Names or IP addresses of LDAP servers to connect to. Multiple servers may be specified, separated by spaces.", "/versions/17/tables/0/rows/1/description": "Port number on LDAP server to connect to. If no port is specified, the LDAP library's default port setting will be used.", "/versions/17/tables/0/rows/2/description": "Set to ldaps to use LDAPS. This is a non-standard way of using LDAP over SSL, supported by some LDAP server implementations. See also the ldaptls option for an alternative.", "/versions/17/tables/0/rows/3/description": "Set to 1 to make the connection between PostgreSQL and the LDAP server use TLS encryption. This uses the StartTLS operation per RFC 4513 . See also the ldapscheme option for an alternative.", "/versions/17/tables/0/rows/4/description": "String to prepend to the user name when forming the DN to bind as, when doing simple bind authentication.", "/versions/17/tables/0/rows/5/description": "String to append to the user name when forming the DN to bind as, when doing simple bind authentication.", "/versions/17/tables/0/rows/6/description": "Root DN to begin the search for the user in, when doing search+bind authentication.", "/versions/17/tables/0/rows/7/description": "DN of user to bind to the directory with to perform the search when doing search+bind authentication.", "/versions/17/tables/0/rows/8/description": "Password for user to bind to the directory with to perform the search when doing search+bind authentication.", "/versions/17/tables/0/rows/9/description": "Attribute to match against the user name in the search when doing search+bind authentication. If no attribute is specified, the uid attribute will be used.", "/versions/17/tables/0/rows/10/description": "The search filter to use when doing search+bind authentication. Occurrences of $username will be replaced with the user name. This allows for more flexible search filters than ldapsearchattribute .", "/versions/17/tables/0/rows/11/description": "An RFC 4516 LDAP URL. This is an alternative way to write some of the other LDAP options in a more compact and standard form. The format is ldap[s]:// host [: port ]/ basedn [?[ attribute ][?[ scope ][?[ filter ]]]] scope must be one of base , one , sub , typically the last. (The default is base , which is normally not useful in this application.) attribute can nominate a single attribute, in which case it is used as a value for ldapsearchattribute . If attribute is empty then filter can be used as a value for ldapsearchfilter . The URL scheme ldaps chooses the LDAPS method for making LDAP connections over SSL, equivalent to using ldapscheme=ldaps . To use encrypted LDAP connections using the StartTLS operation, use the normal URL scheme ldap and specify the ldaptls option in addition to ldapurl . For non-anonymous binds, ldapbinddn and ldapbindpasswd must be specified as separate options. LDAP URLs are currently only supported with OpenLDAP , not on Windows."}, "fallback_fields": [], "source_language": "en", "original_snapshot_sha256": "b20ff3b368afca52cd32af32887cf0b3e4350309dab936d9365e10521fa6dedc", "canonical_center_text_hash": "550ef9ff231b59754b61e1f2d4cb82b0163c3c85eb4ec00a8a225085c72583c9"}, "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "comparison_data": {"method": "ldap", "documented_option_names": ["ldapbasedn", "ldapbinddn", "ldapbindpasswd", "ldapport", "ldapprefix", "ldapscheme", "ldapsearchattribute", "ldapsearchfilter", "ldapserver", "ldapsuffix", "ldaptls", "ldapurl"]}, "comparison_hash": "d40de945ae67b3ac60a284fdd442cc24a4e9d05bc7a7b18009b54e491c381b88", "manual_language": "zh", "description_zh_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u5c31\u4f1a\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u5bf9 LDAP \u670d\u52a1\u5668\u989d\u5916\u53d1\u8d77\u4e24\u6b21\u8bf7\u6c42\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
"}, "18": {"facts": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "aliases": [], "related": [], "release": {"ref": "https://ftp.postgresql.org/pub/source/v18.6/postgresql-18.6.tar.bz2", "label": "18.6", "major": "18", "channel": "stable", "revision": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f", "source_sha256": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f", "catalog_fingerprint": "65c93d6048ef30e61023a84f9680fa6a92b1c383b7eb226741170077eb078502"}, "sources": [{"url": "https://ftp.postgresql.org/pub/source/v18.6/postgresql-18.6.tar.bz2", "label": "Matching PostgreSQL source archive", "sha256": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f"}, {"url": "/docs/18/auth-ldap.html", "path": "auth-ldap.html", "label": "PostgreSQL 18 English manual", "sha256": "8f02f50758b63b0d9a9011b2c3c1ee12e8caa3830408f5ea5d97e0e81ee52628"}, {"url": "/docs/18/auth-pg-hba-conf.html", "path": "auth-pg-hba-conf.html", "label": "PostgreSQL 18 English manual", "sha256": "6340d4abea2e0a3482afc31bcd1599a0fa10dc28a6f1e05d79ba831e2dd0b4c9"}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/18/auth-ldap.html", "anchor": "", "locale": "zh-Hans", "version": "18", "build_id": 107, "page_key": "auth-ldap.html", "extraction": "concept-introduction", "source_hash": "8a05440dce4f97244904d89dfc6ab43fb988975ea445014608a045863396f70f", "fragment_sha256": "ade9ede427d8c1521a1f2fe149790aadb3980c44e0d8d901a5ed7f396015e0af", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:08e987a66af27b98444a8057c256314eafa13611a3fb9e888214fc436824244b", "translated_from_revision": null}, "body_sha256": "5a8ab9944d7b29b510f1348eab0b77072b928b5ccce9d779650e736b54cd7ac0", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f"}, "facts_zh": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "sections": [], "center_zh": {"title": "ldap", "locale": "zh-Hans", "source": {"key": "ldap", "locale": "zh-Hans", "version": "18", "text_hash": "33bdc24cf0fb207e6a1c571e8f7c0a6b366cee0078ddf3db936c5755ed9794a8", "collection": "auth", "dataset_hash": "7c31b524dfe136022d39a6ae8dcfac6b3bbd5f8fdaf422536599981252aff0c9", "source_database": "center", "source_revision": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f"}, "payload": {"facts": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/18/auth-ldap.html", "anchor": "", "locale": "zh-Hans", "version": "18", "build_id": 107, "page_key": "auth-ldap.html", "extraction": "concept-introduction", "source_hash": "8a05440dce4f97244904d89dfc6ab43fb988975ea445014608a045863396f70f", "fragment_sha256": "ade9ede427d8c1521a1f2fe149790aadb3980c44e0d8d901a5ed7f396015e0af", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:08e987a66af27b98444a8057c256314eafa13611a3fb9e888214fc436824244b", "translated_from_revision": null}, "body_sha256": "5a8ab9944d7b29b510f1348eab0b77072b928b5ccce9d779650e736b54cd7ac0", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f"}, "sections": [], "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "description_zh_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u5c31\u4f1a\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u5bf9 LDAP \u670d\u52a1\u5668\u989d\u5916\u53d1\u8d77\u4e24\u6b21\u8bf7\u6c42\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
"}, "summary": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "version": "18", "link_map": {"/zh/docs/18/auth-ldap.html": "/docs/18/auth-ldap.html"}, "body_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u5c31\u4f1a\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u5bf9 LDAP \u670d\u52a1\u5668\u989d\u5916\u53d1\u8d77\u4e24\u6b21\u8bf7\u6c42\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
", "body_sha256": "8e996df407e497cea408b13b7f857737263f7959016700a5a1a8c4a15fe73a11", "content_hash": "33bdc24cf0fb207e6a1c571e8f7c0a6b366cee0078ddf3db936c5755ed9794a8", "source_database": "center", "source_revision": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f"}, "signature": "", "tables_zh": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "attributes": {"method": "ldap", "inventory": "User-visible source authentication method", "configuration": "pg_hba.conf"}, "description": ["\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002"], "manual_html": "", "manual_path": "/docs/18/auth-ldap.html", "sections_zh": [], "localization": {"status": "complete", "sources": [{"url": "/docs/18/auth-ldap.html", "method": "same-major semantic node", "sha256": "065da171765af4f43f5d9405a7594cb88fbc5c9a8566612a459af67e1079cce0", "language": "zh", "matched_nodes": ["#AUTH-LDAP/div[0]", "#AUTH-LDAP/div[11]/dl[0]/dd[1]", "#AUTH-LDAP/div[11]/dl[0]/dd[3]", "#AUTH-LDAP/div[11]/dl[0]/dd[5]", "#AUTH-LDAP/div[11]/dl[0]/dd[7]", "#AUTH-LDAP/div[11]/dl[0]/dd[9]", "#AUTH-LDAP/div[13]/dl[0]/dd[1]/p[0]", "#AUTH-LDAP/div[13]/dl[0]/dd[1]/p[2]", "#AUTH-LDAP/div[13]/dl[0]/dd[1]/p[4]", "#AUTH-LDAP/div[13]/dl[0]/dd[1]/p[5]", "#AUTH-LDAP/div[33]/h3[0]", "#AUTH-LDAP/div[33]/p[1]", "#AUTH-LDAP/div[6]/dl[0]/dd[1]", "#AUTH-LDAP/div[6]/dl[0]/dd[3]", "#AUTH-LDAP/div[6]/dl[0]/dd[5]", "#AUTH-LDAP/div[9]/dl[0]/dd[1]", "#AUTH-LDAP/div[9]/dl[0]/dd[3]", "#AUTH-LDAP/p[10]", "#AUTH-LDAP/p[12]", "#AUTH-LDAP/p[14]", "#AUTH-LDAP/p[15]", "#AUTH-LDAP/p[16]", "#AUTH-LDAP/p[17]", "#AUTH-LDAP/p[19]", "#AUTH-LDAP/p[20]", "#AUTH-LDAP/p[22]", "#AUTH-LDAP/p[23]", "#AUTH-LDAP/p[25]", "#AUTH-LDAP/p[26]", "#AUTH-LDAP/p[28]", "#AUTH-LDAP/p[29]", "#AUTH-LDAP/p[2]", "#AUTH-LDAP/p[31]", "#AUTH-LDAP/p[3]", "#AUTH-LDAP/p[4]", "#AUTH-LDAP/p[5]", "#AUTH-LDAP/p[7]", "#AUTH-LDAP/p[8]"]}], "language": "zh", "original_text": {"/versions/18/description/0": "Authenticate using an LDAP server. See Section 20.10 for details.", "/versions/18/facts/0/label": "Method", "/versions/18/facts/1/label": "Configuration", "/versions/18/facts/2/label": "Inventory", "/versions/18/facts/2/value": "User-visible source authentication method", "/versions/18/tables/0/title": "Documented method options and alternatives", "/versions/18/tables/0/columns/0/label": "Option or term", "/versions/18/tables/0/columns/1/label": "Meaning", "/versions/18/tables/0/rows/0/description": "Names or IP addresses of LDAP servers to connect to. Multiple servers may be specified, separated by spaces.", "/versions/18/tables/0/rows/1/description": "Port number on LDAP server to connect to. If no port is specified, the LDAP library's default port setting will be used.", "/versions/18/tables/0/rows/2/description": "Set to ldaps to use LDAPS. This is a non-standard way of using LDAP over SSL, supported by some LDAP server implementations. See also the ldaptls option for an alternative.", "/versions/18/tables/0/rows/3/description": "Set to 1 to make the connection between PostgreSQL and the LDAP server use TLS encryption. This uses the StartTLS operation per RFC 4513 . See also the ldapscheme option for an alternative.", "/versions/18/tables/0/rows/4/description": "String to prepend to the user name when forming the DN to bind as, when doing simple bind authentication.", "/versions/18/tables/0/rows/5/description": "String to append to the user name when forming the DN to bind as, when doing simple bind authentication.", "/versions/18/tables/0/rows/6/description": "Root DN to begin the search for the user in, when doing search+bind authentication.", "/versions/18/tables/0/rows/7/description": "DN of user to bind to the directory with to perform the search when doing search+bind authentication.", "/versions/18/tables/0/rows/8/description": "Password for user to bind to the directory with to perform the search when doing search+bind authentication.", "/versions/18/tables/0/rows/9/description": "Attribute to match against the user name in the search when doing search+bind authentication. If no attribute is specified, the uid attribute will be used.", "/versions/18/tables/0/rows/10/description": "The search filter to use when doing search+bind authentication. Occurrences of $username will be replaced with the user name. This allows for more flexible search filters than ldapsearchattribute .", "/versions/18/tables/0/rows/11/description": "An RFC 4516 LDAP URL. The format is ldap[s]:// host [: port ]/ basedn [?[ attribute ][?[ scope ][?[ filter ]]]] scope must be one of base , one , sub , typically the last. (The default is base , which is normally not useful in this application.) attribute can nominate a single attribute, in which case it is used as a value for ldapsearchattribute . If attribute is empty then filter can be used as a value for ldapsearchfilter . The URL scheme ldaps chooses the LDAPS method for making LDAP connections over SSL, equivalent to using ldapscheme=ldaps . To use encrypted LDAP connections using the StartTLS operation, use the normal URL scheme ldap and specify the ldaptls option in addition to ldapurl . For non-anonymous binds, ldapbinddn and ldapbindpasswd must be specified as separate options. LDAP URLs are currently only supported with OpenLDAP , not on Windows."}, "fallback_fields": [], "source_language": "en", "original_snapshot_sha256": "cd042d43565e1460d7789e6c328e4902c31423a24f7d95653d8b81545f596da2", "canonical_center_text_hash": "33bdc24cf0fb207e6a1c571e8f7c0a6b366cee0078ddf3db936c5755ed9794a8"}, "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "comparison_data": {"method": "ldap", "documented_option_names": ["ldapbasedn", "ldapbinddn", "ldapbindpasswd", "ldapport", "ldapprefix", "ldapscheme", "ldapsearchattribute", "ldapsearchfilter", "ldapserver", "ldapsuffix", "ldaptls", "ldapurl"]}, "comparison_hash": "d40de945ae67b3ac60a284fdd442cc24a4e9d05bc7a7b18009b54e491c381b88", "manual_language": "zh", "description_zh_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u5c31\u4f1a\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u5bf9 LDAP \u670d\u52a1\u5668\u989d\u5916\u53d1\u8d77\u4e24\u6b21\u8bf7\u6c42\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
", "center_zh_rendered": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u5c31\u4f1a\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u5bf9 LDAP \u670d\u52a1\u5668\u989d\u5916\u53d1\u8d77\u4e24\u6b21\u8bf7\u6c42\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
"}, "19": {"facts": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "aliases": [], "related": [], "release": {"ref": "https://ftp.postgresql.org/pub/source/v19rc1/postgresql-19rc1.tar.bz2", "label": "19rc1", "major": "19", "channel": "preview", "revision": "af105fc8e960fc836a09fc2cd7f582b49fd17675d9d36631abe3a565bfd7d701", "source_sha256": "af105fc8e960fc836a09fc2cd7f582b49fd17675d9d36631abe3a565bfd7d701", "catalog_fingerprint": "62fbf1a3689dbe8bf7e6b3372cfe6fbf867581427b3858a94c8419b77a4d2d1d"}, "sources": [{"url": "https://ftp.postgresql.org/pub/source/v19rc1/postgresql-19rc1.tar.bz2", "label": "Matching PostgreSQL source archive", "sha256": "af105fc8e960fc836a09fc2cd7f582b49fd17675d9d36631abe3a565bfd7d701"}, {"url": "/docs/19/auth-ldap.html", "path": "auth-ldap.html", "label": "PostgreSQL 19 English manual", "sha256": "0a0d02f7dfbcc8227e0f4e2db50b1135258ee67df62141750107d88243a05e86"}, {"url": "/docs/19/auth-pg-hba-conf.html", "path": "auth-pg-hba-conf.html", "label": "PostgreSQL 19 English manual", "sha256": "f61179425c2d8330655f93b616bddb2ab518eeb12ebe4bc77af4a3af78399eeb"}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/19/auth-ldap.html", "anchor": "", "locale": "zh-Hans", "version": "19", "build_id": 109, "page_key": "auth-ldap.html", "extraction": "concept-introduction", "source_hash": "655ea934ffa3f36f69f999c4331ff658909e1928b48fa6ae5f3212ba611f8b7c", "fragment_sha256": "ade9ede427d8c1521a1f2fe149790aadb3980c44e0d8d901a5ed7f396015e0af", "source_revision": "sha256:af105fc8e960fc836a09fc2cd7f582b49fd17675d9d36631abe3a565bfd7d701", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:65fda1f1b62a89992b84014c9157e61b67dbe8190e93945826efec668fad038c", "translated_from_revision": "sha256:af105fc8e960fc836a09fc2cd7f582b49fd17675d9d36631abe3a565bfd7d701"}, "body_sha256": "c10ae34b126635e6733689162a93fd27272b5fda249b8c58ddb36be509b5a70f", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "af105fc8e960fc836a09fc2cd7f582b49fd17675d9d36631abe3a565bfd7d701"}, "facts_zh": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "sections": [], "center_zh": {"title": "ldap", "locale": "zh-Hans", "source": {"key": "ldap", "locale": "zh-Hans", "version": "19", "text_hash": "96fc2cac0d7cace616affff80fca36cc5114d9b0ec99760f973563754e86b1c8", "collection": "auth", "dataset_hash": "7c31b524dfe136022d39a6ae8dcfac6b3bbd5f8fdaf422536599981252aff0c9", "source_database": "center", "source_revision": "af105fc8e960fc836a09fc2cd7f582b49fd17675d9d36631abe3a565bfd7d701"}, "payload": {"facts": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/19/auth-ldap.html", "anchor": "", "locale": "zh-Hans", "version": "19", "build_id": 109, "page_key": "auth-ldap.html", "extraction": "concept-introduction", "source_hash": "655ea934ffa3f36f69f999c4331ff658909e1928b48fa6ae5f3212ba611f8b7c", "fragment_sha256": "ade9ede427d8c1521a1f2fe149790aadb3980c44e0d8d901a5ed7f396015e0af", "source_revision": "sha256:af105fc8e960fc836a09fc2cd7f582b49fd17675d9d36631abe3a565bfd7d701", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:65fda1f1b62a89992b84014c9157e61b67dbe8190e93945826efec668fad038c", "translated_from_revision": "sha256:af105fc8e960fc836a09fc2cd7f582b49fd17675d9d36631abe3a565bfd7d701"}, "body_sha256": "c10ae34b126635e6733689162a93fd27272b5fda249b8c58ddb36be509b5a70f", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "af105fc8e960fc836a09fc2cd7f582b49fd17675d9d36631abe3a565bfd7d701"}, "sections": [], "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "description_zh_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u5c31\u4f1a\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u5bf9 LDAP \u670d\u52a1\u5668\u989d\u5916\u53d1\u8d77\u4e24\u6b21\u8bf7\u6c42\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
"}, "summary": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "version": "19", "link_map": {"/zh/docs/19/auth-ldap.html": "/docs/19/auth-ldap.html"}, "body_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u5c31\u4f1a\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u5bf9 LDAP \u670d\u52a1\u5668\u989d\u5916\u53d1\u8d77\u4e24\u6b21\u8bf7\u6c42\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
", "body_sha256": "7ac192843f87656d341f065224961783a78a972f932761a27251def580258ac1", "content_hash": "96fc2cac0d7cace616affff80fca36cc5114d9b0ec99760f973563754e86b1c8", "source_database": "center", "source_revision": "af105fc8e960fc836a09fc2cd7f582b49fd17675d9d36631abe3a565bfd7d701"}, "signature": "", "tables_zh": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "attributes": {"method": "ldap", "inventory": "User-visible source authentication method", "configuration": "pg_hba.conf"}, "description": ["\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002"], "manual_html": "", "manual_path": "/docs/19/auth-ldap.html", "sections_zh": [], "localization": {"status": "complete", "sources": [{"url": "/docs/19/auth-ldap.html", "method": "same-major semantic node", "sha256": "3668c350cc408b7d489c4b74849ab3e28ebf1c75bfe94d0cd21633e2ec1e84b3", "language": "zh", "matched_nodes": ["#AUTH-LDAP/div[0]", "#AUTH-LDAP/div[11]/dl[0]/dd[1]", "#AUTH-LDAP/div[11]/dl[0]/dd[3]", "#AUTH-LDAP/div[11]/dl[0]/dd[5]", "#AUTH-LDAP/div[11]/dl[0]/dd[7]", "#AUTH-LDAP/div[11]/dl[0]/dd[9]", "#AUTH-LDAP/div[13]/dl[0]/dd[1]/p[0]", "#AUTH-LDAP/div[13]/dl[0]/dd[1]/p[2]", "#AUTH-LDAP/div[13]/dl[0]/dd[1]/p[4]", "#AUTH-LDAP/div[13]/dl[0]/dd[1]/p[5]", "#AUTH-LDAP/div[33]/h3[0]", "#AUTH-LDAP/div[33]/p[1]", "#AUTH-LDAP/div[6]/dl[0]/dd[1]", "#AUTH-LDAP/div[6]/dl[0]/dd[3]", "#AUTH-LDAP/div[6]/dl[0]/dd[5]", "#AUTH-LDAP/div[9]/dl[0]/dd[1]", "#AUTH-LDAP/div[9]/dl[0]/dd[3]", "#AUTH-LDAP/p[10]", "#AUTH-LDAP/p[12]", "#AUTH-LDAP/p[14]", "#AUTH-LDAP/p[15]", "#AUTH-LDAP/p[16]", "#AUTH-LDAP/p[17]", "#AUTH-LDAP/p[19]", "#AUTH-LDAP/p[20]", "#AUTH-LDAP/p[22]", "#AUTH-LDAP/p[23]", "#AUTH-LDAP/p[25]", "#AUTH-LDAP/p[26]", "#AUTH-LDAP/p[28]", "#AUTH-LDAP/p[29]", "#AUTH-LDAP/p[2]", "#AUTH-LDAP/p[31]", "#AUTH-LDAP/p[3]", "#AUTH-LDAP/p[4]", "#AUTH-LDAP/p[5]", "#AUTH-LDAP/p[7]", "#AUTH-LDAP/p[8]"]}], "language": "zh", "original_text": {"/versions/19/description/0": "Authenticate using an LDAP server. See Section 20.10 for details.", "/versions/19/facts/0/label": "Method", "/versions/19/facts/1/label": "Configuration", "/versions/19/facts/2/label": "Inventory", "/versions/19/facts/2/value": "User-visible source authentication method", "/versions/19/tables/0/title": "Documented method options and alternatives", "/versions/19/tables/0/columns/0/label": "Option or term", "/versions/19/tables/0/columns/1/label": "Meaning", "/versions/19/tables/0/rows/0/description": "Names or IP addresses of LDAP servers to connect to. Multiple servers may be specified, separated by spaces.", "/versions/19/tables/0/rows/1/description": "Port number on LDAP server to connect to. If no port is specified, the LDAP library's default port setting will be used.", "/versions/19/tables/0/rows/2/description": "Set to ldaps to use LDAPS. This is a non-standard way of using LDAP over SSL, supported by some LDAP server implementations. See also the ldaptls option for an alternative.", "/versions/19/tables/0/rows/3/description": "Set to 1 to make the connection between PostgreSQL and the LDAP server use TLS encryption. This uses the StartTLS operation per RFC 4513 . See also the ldapscheme option for an alternative.", "/versions/19/tables/0/rows/4/description": "String to prepend to the user name when forming the DN to bind as, when doing simple bind authentication.", "/versions/19/tables/0/rows/5/description": "String to append to the user name when forming the DN to bind as, when doing simple bind authentication.", "/versions/19/tables/0/rows/6/description": "Root DN to begin the search for the user in, when doing search+bind authentication.", "/versions/19/tables/0/rows/7/description": "DN of user to bind to the directory with to perform the search when doing search+bind authentication.", "/versions/19/tables/0/rows/8/description": "Password for user to bind to the directory with to perform the search when doing search+bind authentication.", "/versions/19/tables/0/rows/9/description": "Attribute to match against the user name in the search when doing search+bind authentication. If no attribute is specified, the uid attribute will be used.", "/versions/19/tables/0/rows/10/description": "The search filter to use when doing search+bind authentication. Occurrences of $username will be replaced with the user name. This allows for more flexible search filters than ldapsearchattribute .", "/versions/19/tables/0/rows/11/description": "An RFC 4516 LDAP URL. The format is ldap[s]:// host [: port ]/ basedn [?[ attribute ][?[ scope ][?[ filter ]]]] scope must be one of base , one , sub , typically the last. (The default is base , which is normally not useful in this application.) attribute can nominate a single attribute, in which case it is used as a value for ldapsearchattribute . If attribute is empty then filter can be used as a value for ldapsearchfilter . The URL scheme ldaps chooses the LDAPS method for making LDAP connections over SSL, equivalent to using ldapscheme=ldaps . To use encrypted LDAP connections using the StartTLS operation, use the normal URL scheme ldap and specify the ldaptls option in addition to ldapurl . For non-anonymous binds, ldapbinddn and ldapbindpasswd must be specified as separate options. LDAP URLs are currently only supported with OpenLDAP , not on Windows."}, "fallback_fields": [], "source_language": "en", "original_snapshot_sha256": "2932a992489c1cea78e1803233004428deb7be4ec18e3a8fb8e73cfbd34a6da9", "canonical_center_text_hash": "96fc2cac0d7cace616affff80fca36cc5114d9b0ec99760f973563754e86b1c8"}, "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "comparison_data": {"method": "ldap", "documented_option_names": ["ldapbasedn", "ldapbinddn", "ldapbindpasswd", "ldapport", "ldapprefix", "ldapscheme", "ldapsearchattribute", "ldapsearchfilter", "ldapserver", "ldapsuffix", "ldaptls", "ldapurl"]}, "comparison_hash": "d40de945ae67b3ac60a284fdd442cc24a4e9d05bc7a7b18009b54e491c381b88", "manual_language": "zh", "description_zh_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u5c31\u4f1a\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u5bf9 LDAP \u670d\u52a1\u5668\u989d\u5916\u53d1\u8d77\u4e24\u6b21\u8bf7\u6c42\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
", "source_revalidation": {"kind": "static-same-version-source-and-manual-replay", "audit": "wiki-audit-20261023", "runtime_rerun": false, "compared_fields": "entity membership and source-derived facts; presentation markup normalized", "source_revision": "af105fc8e960fc836a09fc2cd7f582b49fd17675d9d36631abe3a565bfd7d701", "previous_source_revision": "83157ee9c599d03b2f7a3d73ef3a56ec24e0e79cc2b3501a64d1364f56398c86"}}, "20": {"facts": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "aliases": [], "related": [], "release": {"ref": "https://ftp.postgresql.org/pub/snapshot/dev/postgresql-snapshot.tar.bz2", "label": "20devel", "major": "20", "channel": "devel", "revision": "49c73aa4c9cacef8ca979276a28ac416c08e9e54c9baee4ae5fd116a35fa13ac", "source_sha256": "49c73aa4c9cacef8ca979276a28ac416c08e9e54c9baee4ae5fd116a35fa13ac", "catalog_fingerprint": "1ae459dc2ba59b6e0a27d5cbeebb27c417dd0be8ddf853fb0c1e533d4e449c9a"}, "sources": [{"url": "https://ftp.postgresql.org/pub/snapshot/dev/postgresql-snapshot.tar.bz2", "label": "Matching PostgreSQL source archive", "sha256": "49c73aa4c9cacef8ca979276a28ac416c08e9e54c9baee4ae5fd116a35fa13ac"}, {"url": "/docs/devel/auth-ldap.html", "path": "auth-ldap.html", "label": "PostgreSQL 20 English manual", "sha256": "c9d81c7e310f07b474c2a66aaa2ce6fcca8910f5a2774a43f3f5dd2cadee3afc"}, {"url": "/docs/devel/auth-pg-hba-conf.html", "path": "auth-pg-hba-conf.html", "label": "PostgreSQL 20 English manual", "sha256": "aab989aead70e54ad4d37cb6d40b6a1aa370868177becdc759e6977d1074e02d"}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/devel/auth-ldap.html", "anchor": "", "locale": "zh-Hans", "version": "20", "build_id": 111, "page_key": "auth-ldap.html", "extraction": "concept-introduction", "source_hash": "4376053695441126353c3bd1261badf06f2e8f3adfd01e39516680fa298e7f05", "fragment_sha256": "ade9ede427d8c1521a1f2fe149790aadb3980c44e0d8d901a5ed7f396015e0af", "source_revision": "sha256:49c73aa4c9cacef8ca979276a28ac416c08e9e54c9baee4ae5fd116a35fa13ac", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:98c980963b401d40bd50df72b909e7523e3148b8fdb48edd897de2efb67e5235", "translated_from_revision": "sha256:49c73aa4c9cacef8ca979276a28ac416c08e9e54c9baee4ae5fd116a35fa13ac"}, "body_sha256": "027be90b4710afb154127cafbd3cf9811591ffca4b8ec3f2a021019822db0e2d", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "49c73aa4c9cacef8ca979276a28ac416c08e9e54c9baee4ae5fd116a35fa13ac"}, "facts_zh": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "sections": [], "center_zh": {"title": "ldap", "locale": "zh-Hans", "source": {"key": "ldap", "locale": "zh-Hans", "version": "20", "text_hash": "cb1653446a93e052646ec3fed1a2c6196a42134d49a79d1e8b98363e6dcba454", "collection": "auth", "dataset_hash": "7c31b524dfe136022d39a6ae8dcfac6b3bbd5f8fdaf422536599981252aff0c9", "source_database": "center", "source_revision": "49c73aa4c9cacef8ca979276a28ac416c08e9e54c9baee4ae5fd116a35fa13ac"}, "payload": {"facts": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/devel/auth-ldap.html", "anchor": "", "locale": "zh-Hans", "version": "20", "build_id": 111, "page_key": "auth-ldap.html", "extraction": "concept-introduction", "source_hash": "4376053695441126353c3bd1261badf06f2e8f3adfd01e39516680fa298e7f05", "fragment_sha256": "ade9ede427d8c1521a1f2fe149790aadb3980c44e0d8d901a5ed7f396015e0af", "source_revision": "sha256:49c73aa4c9cacef8ca979276a28ac416c08e9e54c9baee4ae5fd116a35fa13ac", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:98c980963b401d40bd50df72b909e7523e3148b8fdb48edd897de2efb67e5235", "translated_from_revision": "sha256:49c73aa4c9cacef8ca979276a28ac416c08e9e54c9baee4ae5fd116a35fa13ac"}, "body_sha256": "027be90b4710afb154127cafbd3cf9811591ffca4b8ec3f2a021019822db0e2d", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "49c73aa4c9cacef8ca979276a28ac416c08e9e54c9baee4ae5fd116a35fa13ac"}, "sections": [], "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "description_zh_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u5c31\u4f1a\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u5bf9 LDAP \u670d\u52a1\u5668\u989d\u5916\u53d1\u8d77\u4e24\u6b21\u8bf7\u6c42\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
"}, "summary": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "version": "20", "link_map": {"/zh/docs/devel/auth-ldap.html": "/docs/devel/auth-ldap.html"}, "body_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u5c31\u4f1a\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u5bf9 LDAP \u670d\u52a1\u5668\u989d\u5916\u53d1\u8d77\u4e24\u6b21\u8bf7\u6c42\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
", "body_sha256": "04ba9f7d7ec00180ab74b00001a66477b75f3399fc256d776be5ac26c20c2876", "content_hash": "cb1653446a93e052646ec3fed1a2c6196a42134d49a79d1e8b98363e6dcba454", "source_database": "center", "source_revision": "49c73aa4c9cacef8ca979276a28ac416c08e9e54c9baee4ae5fd116a35fa13ac"}, "signature": "", "tables_zh": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "attributes": {"method": "ldap", "inventory": "User-visible source authentication method", "configuration": "pg_hba.conf"}, "description": ["\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002"], "manual_html": "", "manual_path": "/docs/devel/auth-ldap.html", "sections_zh": [], "localization": {"status": "complete", "sources": [{"url": "/docs/devel/auth-ldap.html", "method": "same-major semantic node", "sha256": "90b4bbeb9c3af769a0aecd260ad7086f4fd979051ac448d3dd9509fdcc628118", "language": "zh", "matched_nodes": ["#AUTH-LDAP/div[0]", "#AUTH-LDAP/div[11]/dl[0]/dd[1]", "#AUTH-LDAP/div[11]/dl[0]/dd[3]", "#AUTH-LDAP/div[11]/dl[0]/dd[5]", "#AUTH-LDAP/div[11]/dl[0]/dd[7]", "#AUTH-LDAP/div[11]/dl[0]/dd[9]", "#AUTH-LDAP/div[13]/dl[0]/dd[1]/p[0]", "#AUTH-LDAP/div[13]/dl[0]/dd[1]/p[2]", "#AUTH-LDAP/div[13]/dl[0]/dd[1]/p[4]", "#AUTH-LDAP/div[13]/dl[0]/dd[1]/p[5]", "#AUTH-LDAP/div[33]/h3[0]", "#AUTH-LDAP/div[33]/p[1]", "#AUTH-LDAP/div[6]/dl[0]/dd[1]", "#AUTH-LDAP/div[6]/dl[0]/dd[3]", "#AUTH-LDAP/div[6]/dl[0]/dd[5]", "#AUTH-LDAP/div[9]/dl[0]/dd[1]", "#AUTH-LDAP/div[9]/dl[0]/dd[3]", "#AUTH-LDAP/p[10]", "#AUTH-LDAP/p[12]", "#AUTH-LDAP/p[14]", "#AUTH-LDAP/p[15]", "#AUTH-LDAP/p[16]", "#AUTH-LDAP/p[17]", "#AUTH-LDAP/p[19]", "#AUTH-LDAP/p[20]", "#AUTH-LDAP/p[22]", "#AUTH-LDAP/p[23]", "#AUTH-LDAP/p[25]", "#AUTH-LDAP/p[26]", "#AUTH-LDAP/p[28]", "#AUTH-LDAP/p[29]", "#AUTH-LDAP/p[2]", "#AUTH-LDAP/p[31]", "#AUTH-LDAP/p[3]", "#AUTH-LDAP/p[4]", "#AUTH-LDAP/p[5]", "#AUTH-LDAP/p[7]", "#AUTH-LDAP/p[8]"]}], "language": "zh", "original_text": {"/summary": "Authenticate using an LDAP server. See Section 20.10 for details.", "/category": "Authentication and access control", "/versions/20/description/0": "Authenticate using an LDAP server. See Section 20.10 for details.", "/versions/20/facts/0/label": "Method", "/versions/20/facts/1/label": "Configuration", "/versions/20/facts/2/label": "Inventory", "/versions/20/facts/2/value": "User-visible source authentication method", "/versions/20/tables/0/title": "Documented method options and alternatives", "/versions/20/tables/0/columns/0/label": "Option or term", "/versions/20/tables/0/columns/1/label": "Meaning", "/versions/20/tables/0/rows/0/description": "Names or IP addresses of LDAP servers to connect to. Multiple servers may be specified, separated by spaces.", "/versions/20/tables/0/rows/1/description": "Port number on LDAP server to connect to. If no port is specified, the LDAP library's default port setting will be used.", "/versions/20/tables/0/rows/2/description": "Set to ldaps to use LDAPS. This is a non-standard way of using LDAP over SSL, supported by some LDAP server implementations. See also the ldaptls option for an alternative.", "/versions/20/tables/0/rows/3/description": "Set to 1 to make the connection between PostgreSQL and the LDAP server use TLS encryption. This uses the StartTLS operation per RFC 4513 . See also the ldapscheme option for an alternative.", "/versions/20/tables/0/rows/4/description": "String to prepend to the user name when forming the DN to bind as, when doing simple bind authentication.", "/versions/20/tables/0/rows/5/description": "String to append to the user name when forming the DN to bind as, when doing simple bind authentication.", "/versions/20/tables/0/rows/6/description": "Root DN to begin the search for the user in, when doing search+bind authentication.", "/versions/20/tables/0/rows/7/description": "DN of user to bind to the directory with to perform the search when doing search+bind authentication.", "/versions/20/tables/0/rows/8/description": "Password for user to bind to the directory with to perform the search when doing search+bind authentication.", "/versions/20/tables/0/rows/9/description": "Attribute to match against the user name in the search when doing search+bind authentication. If no attribute is specified, the uid attribute will be used.", "/versions/20/tables/0/rows/10/description": "The search filter to use when doing search+bind authentication. Occurrences of $username will be replaced with the user name. This allows for more flexible search filters than ldapsearchattribute .", "/versions/20/tables/0/rows/11/description": "An RFC 4516 LDAP URL. The format is ldap[s]:// host [: port ]/ basedn [?[ attribute ][?[ scope ][?[ filter ]]]] scope must be one of base , one , sub , typically the last. (The default is base , which is normally not useful in this application.) attribute can nominate a single attribute, in which case it is used as a value for ldapsearchattribute . If attribute is empty then filter can be used as a value for ldapsearchfilter . The URL scheme ldaps chooses the LDAPS method for making LDAP connections over SSL, equivalent to using ldapscheme=ldaps . To use encrypted LDAP connections using the StartTLS operation, use the normal URL scheme ldap and specify the ldaptls option in addition to ldapurl . For non-anonymous binds, ldapbinddn and ldapbindpasswd must be specified as separate options. LDAP URLs are currently only supported with OpenLDAP , not on Windows."}, "fallback_fields": [], "source_language": "en", "original_snapshot_sha256": "91ef48555387aa22b26205331f03130249f8d0d567f8fcf20c65d45a27f92d31", "canonical_center_text_hash": "cb1653446a93e052646ec3fed1a2c6196a42134d49a79d1e8b98363e6dcba454"}, "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "comparison_data": {"method": "ldap", "documented_option_names": ["ldapbasedn", "ldapbinddn", "ldapbindpasswd", "ldapport", "ldapprefix", "ldapscheme", "ldapsearchattribute", "ldapsearchfilter", "ldapserver", "ldapsuffix", "ldaptls", "ldapurl"]}, "comparison_hash": "d40de945ae67b3ac60a284fdd442cc24a4e9d05bc7a7b18009b54e491c381b88", "manual_language": "zh", "description_zh_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u5c31\u4f1a\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u5bf9 LDAP \u670d\u52a1\u5668\u989d\u5916\u53d1\u8d77\u4e24\u6b21\u8bf7\u6c42\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
", "source_revalidation": {"kind": "static-same-version-source-and-manual-replay", "audit": "wiki-audit-20261023", "runtime_rerun": false, "compared_fields": "entity membership and source-derived facts; presentation markup normalized", "source_revision": "49c73aa4c9cacef8ca979276a28ac416c08e9e54c9baee4ae5fd116a35fa13ac", "previous_source_revision": "4d3346909b201ac1648232cf290462a7070c119326f56196f1f0253ed80fae41"}}}}, "snapshot": {"facts": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "aliases": [], "related": [], "release": {"ref": "https://ftp.postgresql.org/pub/source/v18.6/postgresql-18.6.tar.bz2", "label": "18.6", "major": "18", "channel": "stable", "revision": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f", "source_sha256": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f", "catalog_fingerprint": "65c93d6048ef30e61023a84f9680fa6a92b1c383b7eb226741170077eb078502"}, "sources": [{"url": "https://ftp.postgresql.org/pub/source/v18.6/postgresql-18.6.tar.bz2", "label": "Matching PostgreSQL source archive", "sha256": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f"}, {"url": "/docs/18/auth-ldap.html", "path": "auth-ldap.html", "label": "PostgreSQL 18 English manual", "sha256": "8f02f50758b63b0d9a9011b2c3c1ee12e8caa3830408f5ea5d97e0e81ee52628"}, {"url": "/docs/18/auth-pg-hba-conf.html", "path": "auth-pg-hba-conf.html", "label": "PostgreSQL 18 English manual", "sha256": "6340d4abea2e0a3482afc31bcd1599a0fa10dc28a6f1e05d79ba831e2dd0b4c9"}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/18/auth-ldap.html", "anchor": "", "locale": "zh-Hans", "version": "18", "build_id": 107, "page_key": "auth-ldap.html", "extraction": "concept-introduction", "source_hash": "8a05440dce4f97244904d89dfc6ab43fb988975ea445014608a045863396f70f", "fragment_sha256": "ade9ede427d8c1521a1f2fe149790aadb3980c44e0d8d901a5ed7f396015e0af", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:08e987a66af27b98444a8057c256314eafa13611a3fb9e888214fc436824244b", "translated_from_revision": null}, "body_sha256": "5a8ab9944d7b29b510f1348eab0b77072b928b5ccce9d779650e736b54cd7ac0", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f"}, "facts_zh": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "sections": [], "center_zh": {"title": "ldap", "locale": "zh-Hans", "source": {"key": "ldap", "locale": "zh-Hans", "version": "18", "text_hash": "33bdc24cf0fb207e6a1c571e8f7c0a6b366cee0078ddf3db936c5755ed9794a8", "collection": "auth", "dataset_hash": "7c31b524dfe136022d39a6ae8dcfac6b3bbd5f8fdaf422536599981252aff0c9", "source_database": "center", "source_revision": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f"}, "payload": {"facts": [{"label": "\u65b9\u6cd5", "value": "ldap"}, {"label": "\u914d\u7f6e", "value": "pg_hba.conf"}, {"label": "\u6e05\u5355", "value": "\u7528\u6237\u53ef\u89c1\u7684\u6e90\u7801\u8ba4\u8bc1\u65b9\u6cd5"}], "tables": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "zh_from": {"kind": "same-version-chinese-manual-with-source-derived-structured-summary", "manual": {"url": "/zh/docs/18/auth-ldap.html", "anchor": "", "locale": "zh-Hans", "version": "18", "build_id": 107, "page_key": "auth-ldap.html", "extraction": "concept-introduction", "source_hash": "8a05440dce4f97244904d89dfc6ab43fb988975ea445014608a045863396f70f", "fragment_sha256": "ade9ede427d8c1521a1f2fe149790aadb3980c44e0d8d901a5ed7f396015e0af", "source_revision": "unknown:rendered-translation-baseline", "translation_revision": "git:b1b500221dbe5437cfca004d6b04d3f6e422765d;html-sha256:08e987a66af27b98444a8057c256314eafa13611a3fb9e888214fc436824244b", "translated_from_revision": null}, "body_sha256": "5a8ab9944d7b29b510f1348eab0b77072b928b5ccce9d779650e736b54cd7ac0", "runtime_rerun": false, "authored_translation": "source-derived-structured-summary", "source_facts_revision": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f"}, "sections": [], "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "description_zh_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u5c31\u4f1a\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u5bf9 LDAP \u670d\u52a1\u5668\u989d\u5916\u53d1\u8d77\u4e24\u6b21\u8bf7\u6c42\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
"}, "summary": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "version": "18", "link_map": {"/zh/docs/18/auth-ldap.html": "/docs/18/auth-ldap.html"}, "body_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u5c31\u4f1a\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u5bf9 LDAP \u670d\u52a1\u5668\u989d\u5916\u53d1\u8d77\u4e24\u6b21\u8bf7\u6c42\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
", "body_sha256": "8e996df407e497cea408b13b7f857737263f7959016700a5a1a8c4a15fe73a11", "content_hash": "33bdc24cf0fb207e6a1c571e8f7c0a6b366cee0078ddf3db936c5755ed9794a8", "source_database": "center", "source_revision": "555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f"}, "signature": "", "tables_zh": [{"key": "method-options", "rows": [{"name": "ldapserver", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u540d\u79f0\u6216IP\u5730\u5740\u3002\u53ef\u4ee5\u6307\u5b9a\u591a\u4e2a\u670d\u52a1\u5668\uff0c\u7528\u7a7a\u683c\u5206\u9694\u3002"}, {"name": "ldapport", "description": "\u8981\u8fde\u63a5\u7684LDAP\u670d\u52a1\u5668\u7684\u7aef\u53e3\u53f7\u3002\u5982\u679c\u672a\u6307\u5b9a\u7aef\u53e3\uff0c\u5219\u5c06\u4f7f\u7528LDAP\u5e93\u7684\u9ed8\u8ba4\u7aef\u53e3\u8bbe\u7f6e\u3002"}, {"name": "ldapscheme", "description": "\u8bbe\u7f6e\u4e3a ldaps \u4ee5\u4f7f\u7528LDAPS\u3002\u8fd9\u662f\u4e00\u79cd\u975e\u6807\u51c6\u7684\u901a\u8fc7 SSL \u4f7f\u7528 LDAP \u7684\u65b9\u5f0f\uff0c\u53d7\u4e00\u4e9bLDAP\u670d\u52a1\u5668\u5b9e\u73b0\u652f\u6301\u3002\u53e6\u8bf7\u53c2\u9605 ldaptls \u9009\u9879\u4f5c\u4e3a\u66ff\u4ee3\u3002"}, {"name": "ldaptls", "description": "\u8bbe\u7f6e\u4e3a 1 \u65f6\uff0cPostgreSQL \u4e0e LDAP \u670d\u52a1\u5668\u4e4b\u95f4\u7684\u8fde\u63a5\u4f7f\u7528 TLS \u52a0\u5bc6\uff0c\u901a\u8fc7 RFC 4513 \u89c4\u5b9a\u7684 StartTLS \u64cd\u4f5c\u5b9e\u73b0\u3002\u53e6\u53ef\u53c2\u89c1 ldapscheme \u9009\u9879\u6240\u63d0\u4f9b\u7684\u66ff\u4ee3\u65b9\u5f0f\u3002"}, {"name": "ldapprefix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u524d\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapsuffix", "description": "\u5728\u8fdb\u884c\u7b80\u5355\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u9644\u52a0\u5230\u7528\u6237\u540d\u540e\u9762\u4ee5\u5f62\u6210\u7ed1\u5b9a DN \u7684\u5b57\u7b26\u4e32\u3002"}, {"name": "ldapbasedn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4f5c\u7528\u6237\u641c\u7d22\u8d77\u70b9\u7684\u6839 DN\u3002"}, {"name": "ldapbinddn", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237 DN\u3002"}, {"name": "ldapbindpasswd", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u7ed1\u5b9a\u5230\u76ee\u5f55\u5e76\u6267\u884c\u641c\u7d22\u7684\u7528\u6237\u5bc6\u7801\u3002"}, {"name": "ldapsearchattribute", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\uff0c\u7528\u4e8e\u4e0e\u7528\u6237\u540d\u5339\u914d\u7684\u5c5e\u6027\u3002\u5982\u679c\u672a\u6307\u5b9a\u5c5e\u6027\uff0c\u5219\u4f1a\u4f7f\u7528 uid \u5c5e\u6027\u3002"}, {"name": "ldapsearchfilter", "description": "\u5728\u8fdb\u884c\u641c\u7d22+\u7ed1\u5b9a\u8ba4\u8bc1\u65f6\u4f7f\u7528\u7684\u641c\u7d22\u8fc7\u6ee4\u5668\u3002\u5176\u4e2d\u51fa\u73b0\u7684 $username \u4f1a\u88ab\u66ff\u6362\u4e3a\u7528\u6237\u540d\u3002\u8fd9\u4f7f\u5f97\u641c\u7d22\u8fc7\u6ee4\u5668\u6bd4 ldapsearchattribute \u66f4\u7075\u6d3b\u3002"}, {"name": "ldapurl", "description": "\u7b26\u5408 RFC 4516 \u7684 LDAP URL\u3002\u683c\u5f0f\u4e3a ldap[s]://host[:port]/basedn[?[attribute][?[scope][?[filter]]]]\u3002scope \u5fc5\u987b\u4e3a base\u3001one \u6216 sub\uff0c\u901a\u5e38\u4f7f\u7528 sub\uff1b\u9ed8\u8ba4\u503c base \u5728\u6b64\u7528\u9014\u4e0b\u4e00\u822c\u6ca1\u6709\u5b9e\u9645\u5e2e\u52a9\u3002attribute \u53ef\u6307\u5b9a\u4e00\u4e2a\u5c5e\u6027\uff0c\u4f5c\u4e3a ldapsearchattribute \u7684\u503c\uff1battribute \u4e3a\u7a7a\u65f6\uff0cfilter \u53ef\u7528\u4f5c ldapsearchfilter \u7684\u503c\u3002URL \u65b9\u6848 ldaps \u8868\u793a\u901a\u8fc7 SSL \u5efa\u7acb LDAP \u8fde\u63a5\uff0c\u7b49\u540c\u4e8e ldapscheme=ldaps\u3002\u82e5\u8981\u901a\u8fc7 StartTLS \u4f7f\u7528\u52a0\u5bc6 LDAP \u8fde\u63a5\uff0c\u5e94\u4f7f\u7528\u666e\u901a\u7684 ldap URL \u65b9\u6848\uff0c\u5e76\u5728 ldapurl \u4e4b\u5916\u6307\u5b9a ldaptls\u3002\u5bf9\u4e8e\u975e\u533f\u540d\u7ed1\u5b9a\uff0c\u5fc5\u987b\u53e6\u884c\u6307\u5b9a ldapbinddn \u548c ldapbindpasswd\u3002LDAP URL \u76ee\u524d\u4ec5\u5728 OpenLDAP \u4e2d\u53d7\u652f\u6301\uff0cWindows \u4e0d\u652f\u6301\u3002"}], "title": "\u624b\u518c\u4e2d\u7684\u65b9\u6cd5\u9009\u9879\u4e0e\u66ff\u4ee3\u65b9\u5f0f", "columns": [{"key": "name", "label": "\u9009\u9879\u6216\u672f\u8bed"}, {"key": "description", "label": "\u542b\u4e49"}]}], "attributes": {"method": "ldap", "inventory": "User-visible source authentication method", "configuration": "pg_hba.conf"}, "description": ["\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002"], "manual_html": "", "manual_path": "/docs/18/auth-ldap.html", "sections_zh": [], "localization": {"status": "complete", "sources": [{"url": "/docs/18/auth-ldap.html", "method": "same-major semantic node", "sha256": "065da171765af4f43f5d9405a7594cb88fbc5c9a8566612a459af67e1079cce0", "language": "zh", "matched_nodes": ["#AUTH-LDAP/div[0]", "#AUTH-LDAP/div[11]/dl[0]/dd[1]", "#AUTH-LDAP/div[11]/dl[0]/dd[3]", "#AUTH-LDAP/div[11]/dl[0]/dd[5]", "#AUTH-LDAP/div[11]/dl[0]/dd[7]", "#AUTH-LDAP/div[11]/dl[0]/dd[9]", "#AUTH-LDAP/div[13]/dl[0]/dd[1]/p[0]", "#AUTH-LDAP/div[13]/dl[0]/dd[1]/p[2]", "#AUTH-LDAP/div[13]/dl[0]/dd[1]/p[4]", "#AUTH-LDAP/div[13]/dl[0]/dd[1]/p[5]", "#AUTH-LDAP/div[33]/h3[0]", "#AUTH-LDAP/div[33]/p[1]", "#AUTH-LDAP/div[6]/dl[0]/dd[1]", "#AUTH-LDAP/div[6]/dl[0]/dd[3]", "#AUTH-LDAP/div[6]/dl[0]/dd[5]", "#AUTH-LDAP/div[9]/dl[0]/dd[1]", "#AUTH-LDAP/div[9]/dl[0]/dd[3]", "#AUTH-LDAP/p[10]", "#AUTH-LDAP/p[12]", "#AUTH-LDAP/p[14]", "#AUTH-LDAP/p[15]", "#AUTH-LDAP/p[16]", "#AUTH-LDAP/p[17]", "#AUTH-LDAP/p[19]", "#AUTH-LDAP/p[20]", "#AUTH-LDAP/p[22]", "#AUTH-LDAP/p[23]", "#AUTH-LDAP/p[25]", "#AUTH-LDAP/p[26]", "#AUTH-LDAP/p[28]", "#AUTH-LDAP/p[29]", "#AUTH-LDAP/p[2]", "#AUTH-LDAP/p[31]", "#AUTH-LDAP/p[3]", "#AUTH-LDAP/p[4]", "#AUTH-LDAP/p[5]", "#AUTH-LDAP/p[7]", "#AUTH-LDAP/p[8]"]}], "language": "zh", "original_text": {"/versions/18/description/0": "Authenticate using an LDAP server. See Section 20.10 for details.", "/versions/18/facts/0/label": "Method", "/versions/18/facts/1/label": "Configuration", "/versions/18/facts/2/label": "Inventory", "/versions/18/facts/2/value": "User-visible source authentication method", "/versions/18/tables/0/title": "Documented method options and alternatives", "/versions/18/tables/0/columns/0/label": "Option or term", "/versions/18/tables/0/columns/1/label": "Meaning", "/versions/18/tables/0/rows/0/description": "Names or IP addresses of LDAP servers to connect to. Multiple servers may be specified, separated by spaces.", "/versions/18/tables/0/rows/1/description": "Port number on LDAP server to connect to. If no port is specified, the LDAP library's default port setting will be used.", "/versions/18/tables/0/rows/2/description": "Set to ldaps to use LDAPS. This is a non-standard way of using LDAP over SSL, supported by some LDAP server implementations. See also the ldaptls option for an alternative.", "/versions/18/tables/0/rows/3/description": "Set to 1 to make the connection between PostgreSQL and the LDAP server use TLS encryption. This uses the StartTLS operation per RFC 4513 . See also the ldapscheme option for an alternative.", "/versions/18/tables/0/rows/4/description": "String to prepend to the user name when forming the DN to bind as, when doing simple bind authentication.", "/versions/18/tables/0/rows/5/description": "String to append to the user name when forming the DN to bind as, when doing simple bind authentication.", "/versions/18/tables/0/rows/6/description": "Root DN to begin the search for the user in, when doing search+bind authentication.", "/versions/18/tables/0/rows/7/description": "DN of user to bind to the directory with to perform the search when doing search+bind authentication.", "/versions/18/tables/0/rows/8/description": "Password for user to bind to the directory with to perform the search when doing search+bind authentication.", "/versions/18/tables/0/rows/9/description": "Attribute to match against the user name in the search when doing search+bind authentication. If no attribute is specified, the uid attribute will be used.", "/versions/18/tables/0/rows/10/description": "The search filter to use when doing search+bind authentication. Occurrences of $username will be replaced with the user name. This allows for more flexible search filters than ldapsearchattribute .", "/versions/18/tables/0/rows/11/description": "An RFC 4516 LDAP URL. The format is ldap[s]:// host [: port ]/ basedn [?[ attribute ][?[ scope ][?[ filter ]]]] scope must be one of base , one , sub , typically the last. (The default is base , which is normally not useful in this application.) attribute can nominate a single attribute, in which case it is used as a value for ldapsearchattribute . If attribute is empty then filter can be used as a value for ldapsearchfilter . The URL scheme ldaps chooses the LDAPS method for making LDAP connections over SSL, equivalent to using ldapscheme=ldaps . To use encrypted LDAP connections using the StartTLS operation, use the normal URL scheme ldap and specify the ldaptls option in addition to ldapurl . For non-anonymous binds, ldapbinddn and ldapbindpasswd must be specified as separate options. LDAP URLs are currently only supported with OpenLDAP , not on Windows."}, "fallback_fields": [], "source_language": "en", "original_snapshot_sha256": "cd042d43565e1460d7789e6c328e4902c31423a24f7d95653d8b81545f596da2", "canonical_center_text_hash": "33bdc24cf0fb207e6a1c571e8f7c0a6b366cee0078ddf3db936c5755ed9794a8"}, "description_zh": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002", "comparison_data": {"method": "ldap", "documented_option_names": ["ldapbasedn", "ldapbinddn", "ldapbindpasswd", "ldapport", "ldapprefix", "ldapscheme", "ldapsearchattribute", "ldapsearchfilter", "ldapserver", "ldapsuffix", "ldaptls", "ldapurl"]}, "comparison_hash": "d40de945ae67b3ac60a284fdd442cc24a4e9d05bc7a7b18009b54e491c381b88", "manual_language": "zh", "description_zh_html": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u5c31\u4f1a\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u5bf9 LDAP \u670d\u52a1\u5668\u989d\u5916\u53d1\u8d77\u4e24\u6b21\u8bf7\u6c42\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
", "center_zh_rendered": "\u8ba4\u8bc1\u65b9\u6cd5 ldap\u3002
ldappg_hba.conf\n \u8fd9\u79cd\u8ba4\u8bc1\u65b9\u6cd5\u7684\u5de5\u4f5c\u65b9\u5f0f\u4e0e password \u7c7b\u4f3c\uff0c\u53ea\u4e0d\u8fc7\u5b83\u4f7f\u7528 LDAP \u4f5c\u4e3a\u5bc6\u7801\u9a8c\u8bc1\u65b9\u6cd5\u3002LDAP \u53ea\u7528\u4e8e\u9a8c\u8bc1\u7528\u6237\u540d/\u5bc6\u7801\u5bf9\u3002\u56e0\u6b64\uff0c\u5728\u4f7f\u7528 LDAP \u8fdb\u884c\u8ba4\u8bc1\u4e4b\u524d\uff0c\u7528\u6237\u5fc5\u987b\u5df2\u7ecf\u5b58\u5728\u4e8e\u6570\u636e\u5e93\u4e2d\u3002\n
\n LDAP \u8ba4\u8bc1\u53ef\u4ee5\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u5de5\u4f5c\u3002\u7b2c\u4e00\u79cd\u6a21\u5f0f\u79f0\u4e3a\u7b80\u5355\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u4f1a\u7ed1\u5b9a\u5230\u6309 prefix username suffix \u5f62\u5f0f\u6784\u9020\u51fa\u7684\u53ef\u5206\u8fa8\u540d\u79f0\u3002\u901a\u5e38\uff0cprefix \u53c2\u6570\u7528\u4e8e\u6307\u5b9a cn=\uff0c\u6216\u5728 Active Directory \u73af\u5883\u4e2d\u6307\u5b9a DOMAIN\\\u3002suffix \u5219\u7528\u4e8e\u6307\u5b9a\u975e Active Directory \u73af\u5883\u4e2d DN \u7684\u5269\u4f59\u90e8\u5206\u3002\n
\n \u7b2c\u4e8c\u79cd\u6a21\u5f0f\u79f0\u4e3a\u641c\u7d22+\u7ed1\u5b9a\u6a21\u5f0f\uff0c\u670d\u52a1\u5668\u9996\u5148\u4f7f\u7528\u7531 ldapbinddn \u548c ldapbindpasswd \u6307\u5b9a\u7684\u56fa\u5b9a\u7528\u6237\u540d\u548c\u5bc6\u7801\u7ed1\u5b9a\u5230 LDAP \u76ee\u5f55\uff0c\u5e76\u641c\u7d22\u8bd5\u56fe\u767b\u5f55\u6570\u636e\u5e93\u7684\u7528\u6237\u3002\u5982\u679c\u6ca1\u6709\u914d\u7f6e\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5219\u4f1a\u5c1d\u8bd5\u5bf9\u76ee\u5f55\u8fdb\u884c\u533f\u540d\u7ed1\u5b9a\u3002\u641c\u7d22\u4f1a\u5728 ldapbasedn \u6307\u5b9a\u7684\u5b50\u6811\u4e0a\u8fdb\u884c\uff0c\u5e76\u5c1d\u8bd5\u5bf9 ldapsearchattribute \u6307\u5b9a\u7684\u5c5e\u6027\u505a\u7cbe\u786e\u5339\u914d\u3002\u4e00\u65e6\u5728\u641c\u7d22\u4e2d\u627e\u5230\u4e86\u8be5\u7528\u6237\uff0c\u670d\u52a1\u5668\u5c31\u4f1a\u4f5c\u4e3a\u8be5\u7528\u6237\u91cd\u65b0\u7ed1\u5b9a\u5230\u76ee\u5f55\uff0c\u5e76\u4f7f\u7528\u5ba2\u6237\u7aef\u6307\u5b9a\u7684\u5bc6\u7801\u6765\u9a8c\u8bc1\u767b\u5f55\u662f\u5426\u6b63\u786e\u3002\u8fd9\u79cd\u6a21\u5f0f\u4e0e Apache mod_authnz_ldap \u548c pam_ldap \u7b49\u8f6f\u4ef6\u4e2d\u7684 LDAP \u8ba4\u8bc1\u65b9\u6848\u76f8\u540c\u3002\u8fd9\u79cd\u65b9\u6cd5\u4f7f\u76ee\u5f55\u4e2d\u7528\u6237\u5bf9\u8c61\u7684\u4f4d\u7f6e\u66f4\u5177\u7075\u6d3b\u6027\uff0c\u4f46\u4f1a\u5bf9 LDAP \u670d\u52a1\u5668\u989d\u5916\u53d1\u8d77\u4e24\u6b21\u8bf7\u6c42\u3002\n
\n \u4ee5\u4e0b\u914d\u7f6e\u9009\u9879\u5728\u4e24\u79cd\u6a21\u5f0f\u4e0b\u90fd\u4f7f\u7528\uff1a\n
\u67e5\u770b\u5b8c\u6574\u4e2d\u6587\u624b\u518c\u4e0e\u4e0a\u4e0b\u6587\u3002
"}, "comparison": {"left": "17", "right": "18", "status": "unchanged", "diff": ""}}