Re: JDBC and GSSAPI/Krb5 with uDig

On Tue, 6 May 2008, Stephen Frost wrote:

> Regarding creating a login.conf, etc. I've gotten it to the point
> where I can use GSSAPI (requires an 8.3 server, but that's not a huge
> problem) to authenticate from uDig if I provide both a username and a
> password to uDig.

You should have only needed a username, not a password. The previous
version didn't set a default username, so without one it wouldn't know who
to connect to the server as. The actual authentication should have gone
through without needing the password.

I've put up a new version here that pulls the default username from the
environment.

http://www.ejurka.com/pgsql/jars/gss3/

> Anyone know how this is going to work on a Windows platform?
>

No idea, I've only been testing on Debian with MIT Kerberos as well.

> Is it possible that 'setLogin' is forcing it to try and get a new
> ticket by providing a password?

It's not clear without some further study as this is a couple steps
removed from the JDBC API by some additional factory stuff.

> I couldn't find 'MyGSSTest' in the above thread to look at and compare,
> unfortunately. A working example would be nice, if available.
>

I've put it up in the same directory as the jar file.

Kris Jurka