Message-ID: <4E7BCA1B.2040408@patgarner.com>
Date: Thu, 22 Sep 2011 19:51:55 -0400
From: Patrick Garner <postgresql.org@patgarner.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64;
	rv:6.0.2) Gecko/20110902 Thunderbird/6.0.2
MIME-Version: 1.0
To: pgsql-admin@postgresql.org
Subject: Re: Question about GSSAPI
References: <4E7A97DF.5010702@patgarner.com> <4E7B221D.3000804@zvelo.com>
In-Reply-To: <4E7B221D.3000804@zvelo.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Chris,

Here is what I installed.

postgresql91-9.1.0-2PGDG.f15.x86_64
postgresql91-devel-9.1.0-2PGDG.f15.x86_64
postgresql91-contrib-9.1.0-2PGDG.f15.x86_64
postgresql91-libs-9.1.0-2PGDG.f15.x86_64
postgresql91-server-9.1.0-2PGDG.f15.x86_64

and here is the output of pg_config

[pgarner@localhost ~]$ /usr/pgsql-9.1/bin/pg_config --configure
'--enable-rpath' '--prefix=/usr/pgsql-9.1' 
'--includedir=/usr/pgsql-9.1/include' 
'--mandir=/usr/pgsql-9.1/share/man' '--datadir=/usr/pgsql-9.1/share' 
'--with-perl' '--with-python' '--with-tcl' '--with-tclconfig=/usr/lib64' 
'--with-openssl' '--with-pam' '--with-krb5' '--with-gssapi' 
'--with-includes=/usr/include' '--with-libraries=/usr/lib64' 
'--enable-nls' '--with-ossp-uuid' '--with-libxml' '--with-libxslt' 
'--with-ldap' '--with-system-tzdata=/usr/share/zoneinfo' 
'--sysconfdir=/etc/sysconfig/pgsql' '--docdir=/usr/share/doc' 
'CFLAGS=-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions 
-fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic 
-I/usr/include/et' 'LDFLAGS=-Wl,--as-needed' 'CPPFLAGS= -I/usr/include/et'

and I do see --with-gssapi, which is awesome!

I did read through the pgsql manual and there are no examples on how to 
implement gssapi authentication against pgsql.  Might you be able to 
point me to documentation?  I am using Tomcat7 and my web application is 
able to connect to pgsql using "trust" authentication.

Thanks for the information on pg_config.

Pat

On 9/22/2011 7:55 AM, Chris Ernst wrote:
> Hi Patrick,
>
> Which pre-built packages (i.e. OS, flavor, architecture, etc...) are you
> asking about?
>
> In most cases, you can check the output of pg_config to see if it was
> built with "--with-gssapi".  You may need to install the PostgresQL
> development packages, depending on your environment.
>
> Hope that helps.
>
> 	- Chris
>
> On 09/21/2011 08:05 PM, Patrick Garner wrote:
>> Are the pre-built binary packages built with support for GSSAPI
>> authentication?
>>
>