From: | Stephen Frost <sfrost(at)snowman(dot)net> |
---|---|
To: | pgsql-jdbc(at)postgresql(dot)org |
Subject: | JDBC and GSSAPI/Krb5 with uDig |
Date: | 2008-05-06 14:01:20 |
Message-ID: | 20080506140120.GJ29912@tamriel.snowman.net |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-jdbc |
Greetings,
uDig uses JDBC (it actually ships with 8.1-403, technically). I have
users who want to use uDig. We use Kerberos for all of our
authentication. I saw that back at the end of January Kris built a
GSS-enabled version of JDBC and put it up here:
http://ejurka.com/pgsql/jars/gss/
I replaced the 8.1-403 JDBC w/ that one and then followed the
additional instructions here:
http://archives.postgresql.org/pgsql-jdbc/2008-01/msg00154.php
Regarding creating a login.conf, etc. I've gotten it to the point
where I can use GSSAPI (requires an 8.3 server, but that's not a huge
problem) to authenticate from uDig if I provide both a username and a
password to uDig. Obviously, that's less than ideal. This is on a
Debian system w/ MIT Kerberos and psql and buddies all work fine using
the existing ticket cache. Is there something special to get JDBC to
use the ticket cache in the KRB5CCNAME environment variable?
Anyone know how this is going to work on a Windows platform?
I believe the code involved from uDig is this:
http://svn.geotools.org/udig/trunk/plugins/net.refractions.udig.catalog.postgis/src/net/refractions/udig/catalog/internal/postgis/ui/PostGisWizardPage.java
Is it possible that 'setLogin' is forcing it to try and get a new
ticket by providing a password? I couldn't find 'MyGSSTest' in the
above thread to look at and compare, unfortunately. A working example
would be nice, if available.
Thanks,
Stephen
From | Date | Subject | |
---|---|---|---|
Next Message | Albretch Mueller | 2008-05-07 02:16:58 | org.postgresql.util.PSQLException: An I/O error occured while sending to the backend |
Previous Message | Dave Dombrosky | 2008-05-05 20:24:09 | Correct getScale() behavior? |