Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1krgun-0004h7-Nf for pgadmin-hackers@arkaria.postgresql.org; Tue, 22 Dec 2020 12:37:21 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1krgum-0006GR-GI for pgadmin-hackers@arkaria.postgresql.org; Tue, 22 Dec 2020 12:37:20 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1krgum-0006GK-B9 for pgadmin-hackers@lists.postgresql.org; Tue, 22 Dec 2020 12:37:20 +0000 Received: from mail-io1-xd34.google.com ([2607:f8b0:4864:20::d34]) by magus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1krguh-0005eK-MZ for pgadmin-hackers@postgresql.org; Tue, 22 Dec 2020 12:37:19 +0000 Received: by mail-io1-xd34.google.com with SMTP id r9so11837288ioo.7 for ; Tue, 22 Dec 2020 04:37:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=enterprisedb-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=IZwTSQc3gCxUBooDXH4TnSoQNUxY/S5gDz+wmd3tMcI=; b=XLQXAF5YgsIrFp0vCSgnIzpDsoke2y0jVIH3MGnjaWX1JQbF/Sgp5vjhZOJOHxtGxM PBcRRBy0hT+K+2uefMZ5D1TejnOJMnQHBhmZ+rghSL3eDc7iVnTYNAG2cVbaSFkEW9cS IYzOwmA/HCDpK2KIIQMUDPLBYppnCZFmC4yrQTJHyasHqCG5JA6mRjeulBS9D8gxykqz Bntq/K4+g24cHt3PzYb3y5dxH6vfTVsycU5dNXn8BeU5QOcdqN1Rdadg5aku8kAYSNNC zO1fmKt9BvOM+CwERjICdhcVIM3hpPXAD7jKXTDR8XIdJA/QfL8IwuF2nC977dwCLBCt /4Ng== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=IZwTSQc3gCxUBooDXH4TnSoQNUxY/S5gDz+wmd3tMcI=; b=XG7N4tIAMnAWJFf9gL6guIvXU0+Q5woZxpdCmHe0DEFtVwhMGch9k1vnWLV9hDtcp+ y+Uo4JJxhw+NuKj44cxijif3GgOp59TsLwC/OHdY6E8Dnw+f1LAghpHQJX2VnekTkulb +Zq1DTADDf75g+sTUQ+1IKhRQ3T7unV8dFUtgRd0aNq0EyCdkRhoZEfFlOalZRlDD5LT FWFfEEvFKzj9CoNREFQtRbuLLCG2iYy+/b8k1Eu4+Frayrd5pTCGMtGQXy+cNn8FuO+Z 5xwZBbe2BAx2YXUUvUC6UIZey8kctImnHCSv+QuDVhQJtXXqUMPsBRjBUB9RkXnPLerC ATFg== X-Gm-Message-State: AOAM533n9BxF1mXTs2OPPhlQkD0nNdEY40ICiD3kN3zuKEUXUyzhulDo gJbaaQMxSZTPQRUvheKvtrm0nQTpF+0K0W8SaW0loc2YR6loEf9grJi8HFiQH+koe+7MG/CSZ6X hNGUS04WVNiaGS9zG1ipBWRDVME62FMgQz+iHMALfLQFqSzx1aNRcYNQ5O3Vg++eAjfa9iv/5dc p12WoA/LqqvOzdN3JlJIGAkI/vdGVY7Q768SAV86K2DpFmxj8dPt8sVFeuFA== X-Google-Smtp-Source: ABdhPJwFkiLaITr9hyvpnfPA1m26ZVkDhu43skNwWYLXWYLb5kC3hKhcSTb+LfJgd06DvFyaw0UXHGCwiDDfXN4CLu8= X-Received: by 2002:a05:6602:5d9:: with SMTP id w25mr17791200iox.206.1608640633372; Tue, 22 Dec 2020 04:37:13 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: Akshay Joshi Date: Tue, 22 Dec 2020 18:07:02 +0530 Message-ID: Subject: Re: [pgAdmin4][Patch] - RM 5457 - Kerberos Authentication - Phase 1 To: Khushboo Vashi Cc: pgadmin-hackers Content-Type: multipart/alternative; boundary="000000000000861d0705b70cd57f" X-CLOUD-SEC-AV-Info: enterprisedb,google_mail,monitor X-CLOUD-SEC-AV-Sent: true X-Gm-Spam: 0 X-Gm-Phishy: 0 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk --000000000000861d0705b70cd57f Content-Type: text/plain; charset="UTF-8" Hi Aditya Can you please do the code review? On Tue, Dec 22, 2020 at 3:44 PM Khushboo Vashi < khushboo.vashi@enterprisedb.com> wrote: > Hi, > > Please find the attached patch to support Kerberos Authentication in > pgAdmin RM 5457. > > The patch introduces a new pluggable option for Kerberos authentication, > using SPNEGO to forward kerberos tickets through a browser which will > bypass the login page entirely if the Kerberos Authentication succeeds. > > The complete setup of the Kerberos Server + pgAdmin Server + Client is > documented in a separate file and attached. > > This patch also includes the small fix related to logging #5829 > > Thanks, > Khushboo > -- *Thanks & Regards* *Akshay Joshi* *pgAdmin Hacker | Principal Software Architect* *EDB Postgres * *Mobile: +91 976-788-8246* --000000000000861d0705b70cd57f Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Aditya

Can you please do the code re= view?

On Tue, Dec 22, 2020 at 3:44 PM Khushboo Vashi <khushboo.vashi@enterprisedb.com&g= t; wrote:
Hi,

Please find the attached patch to support= Kerberos Authentication in pgAdmin RM 5457.

The p= atch introduces a new pluggable option for Kerberos authentication, using= =C2=A0SPNEGO=C2=A0to forward kerberos tickets through a browser which will = bypass the login page entirely if the Kerberos Authentication succeeds.

The complete setup of the Kerberos Server=C2=A0+ pgAd= min Server=C2=A0+ Client is documented in a separate file and attached.

This patch also includes the small fix related to log= ging #5829

Thanks,
Khushboo


--
Thanks & Regards
Akshay Joshi
pgAdmi= n Hacker | Principal Software Architect
EDB Postgres
Mobile: +91 976-788-8246

--000000000000861d0705b70cd57f--