Message-ID: <gh-pgjdbc-pgjdbc-3451-c2612829254@github.com>
From: "nrhall (@nrhall)" <noreply+nrhall@github.com>
To: "pgjdbc/pgjdbc" <noreply+pgjdbc-pgjdbc@github.com>
Date: Fri, 24 Jan 2025 15:41:49 +0000
Subject: Re: [pgjdbc/pgjdbc] PR #3451: Support default GSS credentials in the Java Postgres client
In-Reply-To: <gh-pgjdbc-pgjdbc-3451@github.com>
References: <gh-pgjdbc-pgjdbc-3451@github.com>
List-Id: <gh-pgjdbc-pgjdbc.github.com>
X-GitHub-Author-Login: nrhall
X-GitHub-Comment-Id: 2612829254
X-GitHub-Comment-Type: issue_comment
X-GitHub-Issue: 3451
X-GitHub-Repo: pgjdbc/pgjdbc
X-GitHub-Type: comment
X-GitHub-Url: https://github.com/pgjdbc/pgjdbc/pull/3451#issuecomment-2612829254
Content-Type: text/plain; charset=utf-8

> > Anyway, just thought it was worth mentioning!
> 
> Very much apreciated! (if you want to add to it, can you say if you use SSPI on Windows clients with (Linux) Servers in a Domain without local credential files? Does that work now despite credential guard?)

As it happened, I was testing on a Win11 host, which has CredentialGuard enabled...

And yes - those clients talk to Linux servers, some in MIT Kerberos realms using Linux MIT KDCs, others using Windows AD KDCs.