<div dir="ltr">I have setup PostgreSQL with LDAP against AD with Pgpool still configured to use MD5 authentication until I figure out PAM with LDAP configuration and I see unexpected results. <div><br></div><div>When I try to login to &quot;ldap&quot; database via Pgpool using my database password for MD5 authentication I get expected failure because this password does not match my LDAP(AD) pssword.</div><div> DETAIL:  LDAP authentication failed for user &quot;***&quot;</div><div><br></div><div>When I try to login to &quot;ldap&quot; database via Pgpool using my AD password I get through PgPool even though this password does not match MD5 authentication on PgPool as configured in password file. Why Pgpool let&#39;s me through with password that does not match it&#39;s authentication scheme?</div><div><br></div><div>Here&#39;s config:</div><div><br></div><div>Pgpool</div><div><div>hostssl    all         all         <a href="http://0.0.0.0/0">0.0.0.0/0</a>          md5</div><div>hostssl    all         all         ::/0               md5</div><div><br></div><div>PostgreSQL</div><div><div>hostssl<span style="white-space:pre">        </span>ldap<span style="white-space:pre">                </span>all<span style="white-space:pre">                </span><a href="http://0.0.0.0/0">0.0.0.0/0</a><span style="white-space:pre">                </span>ldap ldapserver=*** ldapprefix=&quot;***&quot; ldapsuffix=&quot;***&quot; </div><div>hostssl<span style="white-space:pre">        </span>ldap<span style="white-space:pre">                </span>all<span style="white-space:pre">                </span>::/0<span style="white-space:pre">                        </span>ldap ldapserver=*** ldapprefix=&quot;***&quot; ldapsuffix=&quot;***&quot;</div><div>hostssl<span style="white-space:pre">        </span>kerberos<span style="white-space:pre">                </span>all<span style="white-space:pre">                </span><a href="http://0.0.0.0/0">0.0.0.0/0</a><span style="white-space:pre">                </span>gss include_realm=0 krb_realm=***<span style="white-space:pre">        </span></div><div>hostssl<span style="white-space:pre">        </span>kerberos<span style="white-space:pre">                </span>all<span style="white-space:pre">                </span>::/0<span style="white-space:pre">                        </span>gss include_realm=0 krb_realm=***</div><div>hostssl<span style="white-space:pre">        </span>all<span style="white-space:pre">                </span>all<span style="white-space:pre">                </span><a href="http://0.0.0.0/0">0.0.0.0/0</a><span style="white-space:pre">                </span>md5</div><div>hostssl<span style="white-space:pre">        </span>all<span style="white-space:pre">                </span>all<span style="white-space:pre">                </span>::/0<span style="white-space:pre">                        </span>md5</div></div><div><div><br></div><div>Thank you,</div><div dir="ltr" class="gmail_signature"><div dir="ltr"><p><b><span style="color:rgb(64,64,64)">Andre Piwoni</span></b></p></div></div></div></div></div>