RE: looking for a installation package to Using GSSAPI with Postgres12 for windows

Hello Jehan-Guillaume,

Thanks a lot for your answer. It looks simplier to use SSPI (witch is already includes).

I have try your suggestion and it seems to work. I need to try some value of the differents parameters to make my test fully work (include_realm, compat_realm, upn_username and krb_realm).

Thanks again,

Regards,

____________________________________________________________________
Sandrine Le Mentec
Software Engineer | CSD

-----Message d'origine-----
De : Jehan-Guillaume de Rorthais <jgdr(at)dalibo(dot)com>
Envoyé : mardi 13 avril 2021 16:35
À : LE MENTEC, SANDRINE
Cc : pgsql-general(at)lists(dot)postgresql(dot)org; KOUMIRA, Adnane
Objet : Re: looking for a installation package to Using GSSAPI with Postgres12 for windows

Hello,

On Tue, 13 Apr 2021 08:10:06 +0000
"LE MENTEC, SANDRINE" <sandrine(dot)le-mentec(at)capgemini(dot)com> wrote:

> Dear postgres community,
>
> I am currently working on Postgres 12.5 on a windows server 2016. I
> need to use Kerberos token for the authentication on the database.
>
> To do so, I am looking for an installation executable file for windows
> with the GSSAPI included. The basic one provided by EDB does not seem
> to include this features.

I had the same problem and fixed it by using sspi.

If you want to authenticate against a microsoft domain, try to replace "gss"
with "sspi", and maybe set "compat_realm=0" if needed. It will try to use Kerberos, or fallback on NTLM.

See: https://www.postgresql.org/docs/12/sspi-auth.html

Regards,
This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain, copy, disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message.