From: Bob Lunney <bob_lunney@yahoo.com>
To: pgsql-admin@postgresql.org
Subject: GSS for both Windows and Linux
Date: Fri, 1 Oct 2010 14:50:38 -0700 (PDT)
Message-ID: <550788.6989.qm@web39702.mail.mud.yahoo.com> (raw)
Is it possible to have clients authenticate via Kerberos to a PG 8.4 server running on linux from both linux and windows hosts? I have authentication working (using GSSAPI) between the linux clients and the server. I'd like to use the Windows binary install (which already has GSSAPI compiled in) against the linux-based database server.
o Do I need to have separate AD principals for the Windows clients or is it possible for Windows clients to get a ticket granting ticket from the linux-based KDC?
o How do I combine the linux and Windows keytab files the server needs to authenticate if separate principals are required?
o Since Windows (mis)uses "POSTGRES" and linux uses "postgres" for the service name, do I need to force either one to use the other's service name, since the database server can only use one version?
Any pointers will be appreciated. I've scoured Google but can't find the missing piece of information I need to get Windows clients working. Thanks in advance!
Bob Lunney
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: bob_lunney@yahoo.com
Subject: Re: GSS for both Windows and Linux
In-Reply-To: <550788.6989.qm@web39702.mail.mud.yahoo.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox