Date: Sat, 24 Nov 2018 15:52:07 -0500
From: Stephen Frost <sfrost@snowman.net>
To: "Lentes, Bernd" <bernd.lentes@helmholtz-muenchen.de>
Cc: pgsql-admin <pgsql-admin@lists.postgresql.org>
Subject: Re: User Authentication: LDAP and "local" accounts concurrently ?
Message-ID: <20181124205207.GN3415@tamriel.snowman.net>
References: 
 <1819852155.20922807.1542983802608.JavaMail.zimbra@helmholtz-muenchen.de>
 <20181123151725.GH3415@tamriel.snowman.net>
 <448603474.21010176.1542999433914.JavaMail.zimbra@helmholtz-muenchen.de>
 <20181123191413.GJ3415@tamriel.snowman.net>
 <33999F41-3B4A-46D3-BB18-531CF8662C0E@helmholtz-muenchen.de>
 <20181123214423.GK3415@tamriel.snowman.net>
 <347994919.21311413.1543089259209.JavaMail.zimbra@helmholtz-muenchen.de>
 <20181124200801.GM3415@tamriel.snowman.net>
 <29D435D8-D8B2-4566-B733-7E990ED5E64C@helmholtz-muenchen.de>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="s8GAKpHVZTOrGbze"
Content-Disposition: inline
In-Reply-To: <29D435D8-D8B2-4566-B733-7E990ED5E64C@helmholtz-muenchen.de>
User-Agent: Mutt/1.5.24 (2015-08-30)
Precedence: bulk


--s8GAKpHVZTOrGbze
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Greetings,

* Lentes, Bernd (bernd.lentes@helmholtz-muenchen.de) wrote:
> > Yes, but it might already have it, depending on what library is being
> > used to talk to PostgreSQL.  The C library interface for PG, libpq, for
> > example, supports Kerberos and just has to be built with it (which most
> > versions you'll find have been).  If the application is JDBC and uses
> > the PostgreSQL JDBC driver, that also supports Kerberos.  If the
> > application is written in another language like Perl or Python and is
> > using the common libraries for those (DBD::Pg, psycopg2), which use
> > libpq underneath, then it depends on the way that version of libpq was
> > built, but, again, most of the libpq builds out there support Kerberos.
> >=20
> > I don't know anything about geneious, but hopefully it's using libpq or
> > JDBC in some fashion and already has Kerberos support thanks to those
> > libraries having it.

> geneious is a Java App, the Download is bundeld with a JRE.
> I think the database driver is JDBC.

If it's the one from https://jdbc.postgresql.org and has all of the
necessary dependencies from a Java perspective then it should work with
Kerberos.

Thanks!

Stephen

--s8GAKpHVZTOrGbze
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBCgAGBQJb+bn2AAoJEO1sijiDR2RV3VQP/0SGM6Fzw2tYe0C+aX6zKcZj
sG6kvLSam/1XZEo3uKaGM01XEn3NWXxGf5178Odb7roTlI5Rn9ymILeW63ZTF9Cg
foJQkIwl4yaTbj9Ux7iKkU375ncSlWbkXGDDJe6J1dDtdzxGTTbiVxaa1ikaweoA
facuq37cMdYQybaMqXBu4U6FxRBn2fUCDtVcLEMgN9Ibxs6c6HmfM28HF97pNbmU
aGdqbkwDlhf0jvk6jjeAhVUZZngx/p4F77NjbNrh8jXDo3EzI6YeLOh54/UQmTPC
nweA5dHIZg2FHF08gOspiz5IZsEmhkMS1zeCnxRiRnIDP2TUXqquE/9RTCOSHUdD
huOVoKa0vQfBevCHRL40s6EhqUzWhiaSdt4i54sbSFn6Fdl8togelrlGzcLjcnGV
Yo9cXog6n7A8YV75qVsoC6oS/Xcy7MRMJj3OzLS0nVV2I7T7o+mDoaQ/NfBx0ZHG
WgJtjCsLoQlokKy0+k4gkwv7pcRtj4wjM3FxYW7m9lnJm5iSFpFFh1wVkjWbZWq6
iLd47LuxG8BQPmFZsBr0EYEGj3m9ZdAwS02aHi5ULvuTv0EMxJS3dAsfvIpka9nd
llcPb0yyYVnjA0UEzcdd5GG+va6Pwyxf+Se871m/M+pZKTAZMnLCFdhwpqMAoG9y
j2oQo8JR3LCypeKT2pGT
=RFtq
-----END PGP SIGNATURE-----

--s8GAKpHVZTOrGbze--