public inbox for [email protected]
help / color / mirror / Atom feed[pgAdmin4][Patch] - RM #6746 - kerberos problems and kerberos documentation
2+ messages / 2 participants
[nested] [flat]
* [pgAdmin4][Patch] - RM #6746 - kerberos problems and kerberos documentation
@ 2022-04-14 06:51 Khushboo Vashi <[email protected]>
0 siblings, 1 reply; 2+ messages in thread
From: Khushboo Vashi @ 2022-04-14 06:51 UTC (permalink / raw)
To: pgadmin-hackers
Hi,
Please find the attached patch to improve the Kerberos Authentication.
Note: I have given the reference to the Kerberos understanding in the
documentation.
Thanks,
Khushboo
Attachments:
[application/octet-stream] RM_6746.patch (2.0K, 3-RM_6746.patch)
download | inline diff:
diff --git a/docs/en_US/kerberos.rst b/docs/en_US/kerberos.rst
index 6dcbd674c..7f333ed1a 100644
--- a/docs/en_US/kerberos.rst
+++ b/docs/en_US/kerberos.rst
@@ -4,10 +4,18 @@
`Enabling Kerberos Authentication`:index:
*****************************************
+**Prerequisite:** Kerberos understanding and setup
+
+Reference: https://web.mit.edu/kerberos/
+
To configure Kerberos authentication, you must setup your Kerberos Server and
-generate a ticket on the client using *kinit*. To enable Kerberos authentication
-for pgAdmin, you must configure the Kerberos settings in *config_local.py* or
-*config_system.py* (see the :ref:`config.py <config_py>` documentation) on the
+obtain a ticket on the client using *kinit*.
+
+Note: Active Directory users with Kerberos support do not require kinit.
+
+To enable Kerberos authentication for pgAdmin, you must configure the
+Kerberos settings in *config_local.py* or *config_system.py*
+(see the :ref:`config.py <config_py>` documentation) on the
system where pgAdmin is installed in Server mode. You can copy these settings
from *config.py* file and modify the values for the following parameters.
@@ -38,10 +46,10 @@ from *config.py* file and modify the values for the following parameters.
Keytab file for HTTP Service
============================
-* Generate the *Keytab* file for the HTTP service principal and copy it to the
- *pgAdmin* webserver machine. Ensure that the operating system user owning
- the *pgAdmin* webserver is the owner of this file and should be accessible
- by that user.
+* Generate the *Keytab* file for the HTTP service principal HTTP/<host-name>@realm,
+ and copy it to the *pgAdmin* webserver machine. Ensure that the operating system
+ user owning the *pgAdmin* webserver is the owner of this file and should be
+ accessible by that user.
* Please note that either you should set *default_keytab_name* parameter in
*krb5.conf* file or the environment variable *KRB5_KTNAME*. If not set then
^ permalink raw reply [nested|flat] 2+ messages in thread
* Re: [pgAdmin4][Patch] - RM #6746 - kerberos problems and kerberos documentation
@ 2022-04-18 04:41 Akshay Joshi <[email protected]>
parent: Khushboo Vashi <[email protected]>
0 siblings, 0 replies; 2+ messages in thread
From: Akshay Joshi @ 2022-04-18 04:41 UTC (permalink / raw)
To: Khushboo Vashi <[email protected]>; +Cc: pgadmin-hackers
Thanks, the patch applied.
On Thu, Apr 14, 2022 at 12:21 PM Khushboo Vashi <
[email protected]> wrote:
> Hi,
>
> Please find the attached patch to improve the Kerberos Authentication.
>
> Note: I have given the reference to the Kerberos understanding in the
> documentation.
>
> Thanks,
> Khushboo
>
--
*Thanks & Regards*
*Akshay Joshi*
*pgAdmin Hacker | Principal Software Architect*
*EDB Postgres <http://edbpostgres.com>*
*Mobile: +91 976-788-8246*
^ permalink raw reply [nested|flat] 2+ messages in thread
end of thread, other threads:[~2022-04-18 04:41 UTC | newest]
Thread overview: 2+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2022-04-14 06:51 [pgAdmin4][Patch] - RM #6746 - kerberos problems and kerberos documentation Khushboo Vashi <[email protected]>
2022-04-18 04:41 ` Akshay Joshi <[email protected]>
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox