Skip to content
Synchronize PostgreSQL roles with Active Directory
Branch: master
Clone or download

Latest commit

Fetching latest commit…
Cannot retrieve the latest commit at this time.


Type Name Latest commit message Commit time
Failed to load latest commit information.


padnag is a utility to synchronize PostgreSQL database roles with Active Directory groups & group members.



Create the database role hierarchy you need, even when the AD is differently organised.

Straight one-to-one mapping from AD to DB or link multiple OUs, groups and roles. Database roles can associated with one or several Active Directory groups - and vice versa - an Active Directory group can be tied to one or several database roles.


Fully tested against PostgreSQL versions 9.2, 9.3, 9.4, 9.5 & 9.6.

padnag safely handles removing users from a group by transferring any objects owned back to the group role.

padnag has --test mode to safely preview it's intended actions. This will not make any changes on the database.

padnag has --verbose mode and logging levels keep you informed.


Do you need to remove leading # signs or trailing suffixes from the user names? Active Directory attributes can be tweaked with powerful regular expressions.

Easy to install

padnag is easy to install, it comes ready packaged for Centos7 and Ubuntu 1604 LTS distributions. padnag is a stand alone executable with no dependencies other than the normal libc system library.

Simple to Configure

Install, provide the PostgreSQL and Active Directory parameters and you're good to go. The config file is TOML text file ( similar to .INI ) and can be edited with your favourite text editor.


Choose to use the provided Systemd service unit or run from the command line or from cron.


padnag does one thing well.


padnag is licensed under the Business Source License. The Source code is available over at bitbucket.

You can’t perform that action at this time.