[anarazel]

Postgres does have ldap based auth, and also can authenticate against AD using sspi/gssapi.

The problem with that is that it requires users to have been created inside postgres first, and that you can't manage group membership inside AD.

[gregn610]

yup, that's what I meant by authorisation, keeping the roles and groups in pgsql up to date.