From: Peter Koczan <pjkoczan@gmail.com>
To: Stephen Frost <sfrost@snowman.net>
To: pgsql-admin@postgresql.org <pgsql-admin@postgresql.org>
Subject: Re: Postgres 8.3.3, GSSAPI, and Windows XP
Date: Thu, 11 Sep 2008 13:29:28 -0500
Message-ID: <4544e0330809111129y3e4f260eq7df3b4702effb407@mail.gmail.com> (raw)
In-Reply-To: <20080910235045.GW16005@tamriel.snowman.net>
References: <4544e0330809101549k2ad82bd1td15a67838d37200@mail.gmail.com>
<20080910235045.GW16005@tamriel.snowman.net>
On Wed, Sep 10, 2008 at 6:50 PM, Stephen Frost <sfrost@snowman.net> wrote:
> Peter,
>
> * Peter Koczan (pjkoczan@gmail.com) wrote:
>> Gritty details:
>> PostgreSQL 8.3.3
>> Windows XP SP2 (32-bit)
>> Kerberos for Windows 3.2.2
>> Server is running on Red Hat Enterprise Linux 5.2, Kerberos 1.6.2
>
> When using GSSAPI and KfW, you need to set a couple of environment
> variables for libpq to pick up on which indicate it should use GSSAPI
> rather than SSPI (standard Windows Kerberos/AD stuff):
>
> PGGSSLIB = gssapi
>
> and you'll probably also want:
>
> PGKRBSRVNAME = postgres
>
> Just set those through your computer settings, probably system wide on
> the systems in question.
>
> Since it defaults to upper-case POSTGRES on Windows, but if you're
> running KfW, I'm guessing you're using just regular MIT/Kerberos and
> using 'postgres/hostname.domain@REALM'.
That worked perfectly. Thanks.
Is there a way to specify gssapi as the default to use at build time,
so no environment variables would have to be set? It's fine if the
answer is no since setting one ENV variable isn't a huge deal, but
it'd be nice if it could "just work".
Peter
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: pjkoczan@gmail.com, sfrost@snowman.net
Subject: Re: Postgres 8.3.3, GSSAPI, and Windows XP
In-Reply-To: <4544e0330809111129y3e4f260eq7df3b4702effb407@mail.gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox