Seems postgres only chose to support StartTLS for ldap auth encryption. Does anyone know why? Our organization is explicitly denying any unsecured connections so StartTLS won't work since it requires the initial connection to be unsecure. To me it seems postgres should not care what protocol is used for the ldapurl and should leave it up to the underlying library. Any thoughts? Any workarounds to get ldap auth for a server that only supports LDAPS to work?
2 Answers
Postgres now supports LDAPS when using ldapurl starting with version 11 according to the documentation
Related