From: Patrick Garner <postgresql.org@patgarner.com>
To: pgsql-admin@postgresql.org
Subject: Re: Question about GSSAPI
Date: Thu, 22 Sep 2011 19:51:55 -0400
Message-ID: <4E7BCA1B.2040408@patgarner.com> (raw)
In-Reply-To: <4E7B221D.3000804@zvelo.com>
References: <4E7A97DF.5010702@patgarner.com>
<4E7B221D.3000804@zvelo.com>
Chris,
Here is what I installed.
postgresql91-9.1.0-2PGDG.f15.x86_64
postgresql91-devel-9.1.0-2PGDG.f15.x86_64
postgresql91-contrib-9.1.0-2PGDG.f15.x86_64
postgresql91-libs-9.1.0-2PGDG.f15.x86_64
postgresql91-server-9.1.0-2PGDG.f15.x86_64
and here is the output of pg_config
[pgarner@localhost ~]$ /usr/pgsql-9.1/bin/pg_config --configure
'--enable-rpath' '--prefix=/usr/pgsql-9.1'
'--includedir=/usr/pgsql-9.1/include'
'--mandir=/usr/pgsql-9.1/share/man' '--datadir=/usr/pgsql-9.1/share'
'--with-perl' '--with-python' '--with-tcl' '--with-tclconfig=/usr/lib64'
'--with-openssl' '--with-pam' '--with-krb5' '--with-gssapi'
'--with-includes=/usr/include' '--with-libraries=/usr/lib64'
'--enable-nls' '--with-ossp-uuid' '--with-libxml' '--with-libxslt'
'--with-ldap' '--with-system-tzdata=/usr/share/zoneinfo'
'--sysconfdir=/etc/sysconfig/pgsql' '--docdir=/usr/share/doc'
'CFLAGS=-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions
-fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic
-I/usr/include/et' 'LDFLAGS=-Wl,--as-needed' 'CPPFLAGS= -I/usr/include/et'
and I do see --with-gssapi, which is awesome!
I did read through the pgsql manual and there are no examples on how to
implement gssapi authentication against pgsql. Might you be able to
point me to documentation? I am using Tomcat7 and my web application is
able to connect to pgsql using "trust" authentication.
Thanks for the information on pg_config.
Pat
On 9/22/2011 7:55 AM, Chris Ernst wrote:
> Hi Patrick,
>
> Which pre-built packages (i.e. OS, flavor, architecture, etc...) are you
> asking about?
>
> In most cases, you can check the output of pg_config to see if it was
> built with "--with-gssapi". You may need to install the PostgresQL
> development packages, depending on your environment.
>
> Hope that helps.
>
> - Chris
>
> On 09/21/2011 08:05 PM, Patrick Garner wrote:
>> Are the pre-built binary packages built with support for GSSAPI
>> authentication?
>>
>
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: postgresql.org@patgarner.com
Subject: Re: Question about GSSAPI
In-Reply-To: <4E7BCA1B.2040408@patgarner.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox