GSS for both Windows and Linux

From: Bob Lunney <bob_lunney(at)yahoo(dot)com>
To: pgsql-admin(at)postgresql(dot)org
Subject: GSS for both Windows and Linux
Date: 2010-10-01 21:50:38
Message-ID: 550788.6989.qm@web39702.mail.mud.yahoo.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

Is it possible to have clients authenticate via Kerberos to a PG 8.4 server running on linux from both linux and windows hosts? I have authentication working (using GSSAPI) between the linux clients and the server. I'd like to use the Windows binary install (which already has GSSAPI compiled in) against the linux-based database server.

o Do I need to have separate AD principals for the Windows clients or is it possible for Windows clients to get a ticket granting ticket from the linux-based KDC?

o How do I combine the linux and Windows keytab files the server needs to authenticate if separate principals are required?

o Since Windows (mis)uses "POSTGRES" and linux uses "postgres" for the service name, do I need to force either one to use the other's service name, since the database server can only use one version?

Any pointers will be appreciated. I've scoured Google but can't find the missing piece of information I need to get Windows clients working. Thanks in advance!

Bob Lunney

Browse pgsql-admin by date

  From Date Subject
Next Message Christian Ullrich 2010-10-02 05:46:20 Re: creating language plperl fails in windows 7
Previous Message Willy-Bas Loos 2010-10-01 21:21:01 Re: PGPOOL-II