We need mutual authentication via ODBC, looking into the psqlODBC driver to find where the Kerberos connection was getting created. Here in sspisvcs.c the PerformKerberosEtcClientHandshake contains the set of SSPI flags being set on the request (held in the dwSSPIFlags variable).
This set is missing the flag required for mutual authentication (ISC_REQ_MUTUAL_AUTH). Can this be added to your ODBC driver?
--
Regards,
Debbie Steigner
Red Hat Global Support Services
Principal Technical Support Engineer