Make SSPI documentation clearer

From: PG Doc comments form <noreply(at)postgresql(dot)org>
To: pgsql-docs(at)lists(dot)postgresql(dot)org
Cc: tpo_deb(at)sourcepole(dot)ch
Subject: Make SSPI documentation clearer
Date: 2023-03-10 15:30:25
Message-ID: 167846222574.1803490.15815104179136215862@wrigleys.postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-docs

The following documentation comment has been logged on the website:

Page: https://www.postgresql.org/docs/15/sspi-auth.html
Description:

The [current SSPI
documentation](https://www.postgresql.org/docs/current/sspi-auth.html)
reads:

"SSPI authentication only works when both server and client are running
Windows, or, on non-Windows platforms, when GSSAPI is available."

I interpret that phrase like this:

* there's a case where both server and client are running Windows
* there's a case where both are running non-Windows

What about mixed cases? When the client is non-Windows, then can it use
SSPI? No, AFAIK not. So I'd suggest to make that phrase above clearer and
completely explicit:

"SSPI authentication works when both server and client are running
Windows.

When the server is on a non-Windows platform then the server must use GSSAPI
if it wants to authenticate the client either via Kerberos or via Active
Directory. A client on a Windows platform that connects to a non-Windows
Postgresql server can either use SSPI (strongly encouraged) or GSS (much
more difficult to set up) if it wants to authenticate via Kerberos or Active
Directory. A client from a non-Windows platform must use GSS if it wants to
authenticate via Kerberos or Active Directory."

Thanks a lot for everything Postgres to you who is reading a considering
this change!

Responses

Browse pgsql-docs by date

  From Date Subject
Next Message Stephen Frost 2023-03-13 00:36:53 Re: Make SSPI documentation clearer
Previous Message PG Doc comments form 2023-03-02 13:55:31 I think that the transaction tutorial document (3.4) should mention transaction isolation