From: Bruce Momjian <pgman@candle.pha.pa.us>
To: Daniel Kouril <kouril@ics.muni.cz>
Cc: Henry B. Hotz <hotz@jpl.nasa.gov>
Cc: Peter Eisentraut <peter_e@gmx.net>
Cc: lukeh@PADL.COM
Cc: buckh@pobox.com
Cc: heimdal-discuss@sics.se
Cc: Dj.Byrne@jpl.nasa.gov
Cc: pgsql-docs@postgresql.org
Subject: Re: couple socket-connection questions
Date: Fri, 6 Jun 2003 14:08:55 -0400 (EDT)
Message-ID: <200306061808.h56I8t426284@candle.pha.pa.us> (raw)
In-Reply-To: <20030602115121.GF30779@odorn.ics.muni.cz>
Patch applied to documentation to list two mod_auth kerberos projects.
Thanks.
---------------------------------------------------------------------------
Daniel Kouril wrote:
> On Sun, Jun 01, 2003 at 03:22:04PM -0700, Henry B. Hotz wrote:
> > At 11:50 PM +0200 6/1/03, Peter Eisentraut wrote:
> > >Henry B. Hotz writes:
> > >
> > >> My guess is that the module web page had a spelling error once which
> > >> was picked up by the PostgreSQL admin manual. The spelling error has
> > >> been fixed everywhere now, except at PostgreSQL.
> > >
> > >The mention in the PostgreSQL documentation was once submitted by an
> > >external contributor and might have contained a typo. Would you like to
> > >submit a correction, or should it be removed altogether? I got a little
> > >bit lost about what is correct.
> >
> > Gee, I was hoping you could tell me what was correct.
> >
> > I'm guessing the correction should be: change mod_auth_krb to
> > mod_auth_kerb.
>
> The mod_auth_kerb module available from modauthkerb.sf.net doesn't provide
> the full kerberos authentication (it only supports password verification
> against KDC). Recently I've joined the modauthkerb.sf.net project trying to
> incorporate the changes needed to implement full kerberos support, but I'm
> not sure when it's ready.
>
> So, as for the PostgreSQL docs, if you don't have any other modules in your
> mind, I'd suggest to include references to both these module:
> - mod_auth_kerb hosted by Sourceforge at modauthkerb.sf.net
> - mod_auth_gss_krb5 available from
> http://meta.cesnet.cz/software/negotiate.en.html
> You can also state these two modules are being integrated.
>
> Cheers,
>
> --
> Dan
>
> ---------------------------(end of broadcast)---------------------------
> TIP 1: subscribe and unsubscribe commands go to majordomo@postgresql.org
>
--
Bruce Momjian | http://candle.pha.pa.us
pgman@candle.pha.pa.us | (610) 359-1001
+ If your life is a hard drive, | 13 Roberts Road
+ Christ can be your backup. | Newtown Square, Pennsylvania 19073
Attachments:/bjm/diff (text/plain, 1.4K) download
Index: doc/src/sgml/client-auth.sgml
===================================================================
RCS file: /cvsroot/pgsql-server/doc/src/sgml/client-auth.sgml,v
retrieving revision 1.46
diff -c -c -r1.46 client-auth.sgml
*** doc/src/sgml/client-auth.sgml 13 Mar 2003 01:30:26 -0000 1.46
--- doc/src/sgml/client-auth.sgml 6 Jun 2003 18:08:03 -0000
***************
*** 639,646 ****
</para>
<para>
! If you use <application>mod_auth_krb</application> and
! <application>mod_perl</application> on your
<productname>Apache</productname> web server, you can use
<literal>AuthType KerberosV5SaveCredentials</literal> with a
<application>mod_perl</application> script. This gives secure
--- 639,653 ----
</para>
<para>
! <ulink url="http://www.kernel.org/pub/linux/libs/pam/"><productname>Linux-PAM</>
! Page
!
! If you use <application>mod_auth_kerb</application> from
! <ulink url="http://modauthkerb.sf.net">http://modauthkerb.sf.net</ulink>
! or <application>mod_auth_gss_krb5</application> from
! <ulink url="http://meta.cesnet.cz/software/negotiate.en.html">
! http://meta.cesnet.cz/software/negotiate.en.html</ulink>,
! and <application>mod_perl</application> on your
<productname>Apache</productname> web server, you can use
<literal>AuthType KerberosV5SaveCredentials</literal> with a
<application>mod_perl</application> script. This gives secure
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-docs@postgresql.org
Cc: pgman@candle.pha.pa.us, kouril@ics.muni.cz, hotz@jpl.nasa.gov, peter_e@gmx.net, lukeh@PADL.COM, buckh@pobox.com, heimdal-discuss@sics.se, Dj.Byrne@jpl.nasa.gov
Subject: Re: couple socket-connection questions
In-Reply-To: <200306061808.h56I8t426284@candle.pha.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox