DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=message-id:date:from:to:subject:in-reply-to:mime-version
	:content-type:content-transfer-encoding:content-disposition
	:references;
	b=UYJPiRXDW6fCxR0z3JMaq58g14BNP/dHoHo0qFbjfcbJAfp5RJA5Cb/+jr1bEdSoj+
	GBhA2Pr7AxvBf9WwvlKlKrrMC6SYU1c3QVoOD5UV02LR6rEN6OImnyHVj0I+QlU6qg7l
	XsV3o+eRm1Ck3Z/XirRUSnIJNHUCm8qsV4WjA=
Message-ID: <4544e0330809111129y3e4f260eq7df3b4702effb407@mail.gmail.com>
Date: Thu, 11 Sep 2008 13:29:28 -0500
From: "Peter Koczan" <pjkoczan@gmail.com>
To: "Stephen Frost" <sfrost@snowman.net>,
	"pgsql-admin@postgresql.org" <pgsql-admin@postgresql.org>
Subject: Re: Postgres 8.3.3, GSSAPI, and Windows XP
In-Reply-To: <20080910235045.GW16005@tamriel.snowman.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <4544e0330809101549k2ad82bd1td15a67838d37200@mail.gmail.com>
	<20080910235045.GW16005@tamriel.snowman.net>

On Wed, Sep 10, 2008 at 6:50 PM, Stephen Frost <sfrost@snowman.net> wrote:
> Peter,
>
> * Peter Koczan (pjkoczan@gmail.com) wrote:
>> Gritty details:
>> PostgreSQL 8.3.3
>> Windows XP SP2 (32-bit)
>> Kerberos for Windows 3.2.2
>> Server is running on Red Hat Enterprise Linux 5.2, Kerberos 1.6.2
>
> When using GSSAPI and KfW, you need to set a couple of environment
> variables for libpq to pick up on which indicate it should use GSSAPI
> rather than SSPI (standard Windows Kerberos/AD stuff):
>
> PGGSSLIB = gssapi
>
> and you'll probably also want:
>
> PGKRBSRVNAME = postgres
>
> Just set those through your computer settings, probably system wide on
> the systems in question.
>
> Since it defaults to upper-case POSTGRES on Windows, but if you're
> running KfW, I'm guessing you're using just regular MIT/Kerberos and
> using 'postgres/hostname.domain@REALM'.

That worked perfectly. Thanks.

Is there a way to specify gssapi as the default to use at build time,
so no environment variables would have to be set? It's fine if the
answer is no since setting one ENV variable isn't a huge deal, but
it'd be nice if it could "just work".

Peter