From: Bruce Momjian <pgman@candle.pha.pa.us>
Message-Id: <200306061808.h56I8t426284@candle.pha.pa.us>
Subject: Re: couple socket-connection questions
In-Reply-To: <20030602115121.GF30779@odorn.ics.muni.cz>
To: Daniel Kouril <kouril@ics.muni.cz>
Date: Fri, 6 Jun 2003 14:08:55 -0400 (EDT)
Cc: "Henry B. Hotz" <hotz@jpl.nasa.gov>,
	Peter Eisentraut <peter_e@gmx.net>, lukeh@PADL.COM, buckh@pobox.com,
	heimdal-discuss@sics.se, Dj.Byrne@jpl.nasa.gov, pgsql-docs@postgresql.org
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=ELM1054922935-22372-0_
Content-Transfer-Encoding: 7bit

--ELM1054922935-22372-0_
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII


Patch applied to documentation to list two mod_auth kerberos projects. 
Thanks.

---------------------------------------------------------------------------

Daniel Kouril wrote:
> On Sun, Jun 01, 2003 at 03:22:04PM -0700, Henry B. Hotz wrote:
> > At 11:50 PM +0200 6/1/03, Peter Eisentraut wrote:
> > >Henry B. Hotz writes:
> > >
> > >> My guess is that the module web page had a spelling error once which
> > >> was picked up by the PostgreSQL admin manual.  The spelling error has
> > >> been fixed everywhere now, except at PostgreSQL.
> > >
> > >The mention in the PostgreSQL documentation was once submitted by an
> > >external contributor and might have contained a typo.  Would you like to
> > >submit a correction, or should it be removed altogether?  I got a little
> > >bit lost about what is correct.
> > 
> > Gee, I was hoping you could tell me what was correct.
> > 
> > I'm guessing the correction should be:  change mod_auth_krb to 
> > mod_auth_kerb.
> 
> The mod_auth_kerb module available from modauthkerb.sf.net doesn't provide
> the full kerberos authentication (it only supports password verification
> against KDC). Recently I've joined the modauthkerb.sf.net project trying to
> incorporate the changes needed to implement full kerberos support, but I'm
> not sure when it's ready.
> 
> So, as for the PostgreSQL docs, if you don't have any other modules in your
> mind, I'd suggest to include references to both these module:
>   - mod_auth_kerb hosted by Sourceforge at modauthkerb.sf.net
>   - mod_auth_gss_krb5 available from
>     http://meta.cesnet.cz/software/negotiate.en.html
> You can also state these two modules are being integrated.
> 
> Cheers,
> 
> --
> Dan
> 
> ---------------------------(end of broadcast)---------------------------
> TIP 1: subscribe and unsubscribe commands go to majordomo@postgresql.org
> 

-- 
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman@candle.pha.pa.us               |  (610) 359-1001
  +  If your life is a hard drive,     |  13 Roberts Road
  +  Christ can be your backup.        |  Newtown Square, Pennsylvania 19073

--ELM1054922935-22372-0_
Content-Transfer-Encoding: 7bit
Content-Type: text/plain
Content-Disposition: inline; filename="/bjm/diff"

Index: doc/src/sgml/client-auth.sgml
===================================================================
RCS file: /cvsroot/pgsql-server/doc/src/sgml/client-auth.sgml,v
retrieving revision 1.46
diff -c -c -r1.46 client-auth.sgml
*** doc/src/sgml/client-auth.sgml	13 Mar 2003 01:30:26 -0000	1.46
--- doc/src/sgml/client-auth.sgml	6 Jun 2003 18:08:03 -0000
***************
*** 639,646 ****
     </para>
  
     <para>
!     If you use <application>mod_auth_krb</application> and
!     <application>mod_perl</application> on your
      <productname>Apache</productname> web server, you can use
      <literal>AuthType KerberosV5SaveCredentials</literal> with a
      <application>mod_perl</application> script. This gives secure
--- 639,653 ----
     </para>
  
     <para>
! <ulink url="http://www.kernel.org/pub/linux/libs/pam/"><productname>Linux-PAM</>
!     Page
! 
!     If you use <application>mod_auth_kerb</application> from
!     <ulink url="http://modauthkerb.sf.net">http://modauthkerb.sf.net</ulink>
!     or <application>mod_auth_gss_krb5</application> from
!     <ulink url="http://meta.cesnet.cz/software/negotiate.en.html">
!     http://meta.cesnet.cz/software/negotiate.en.html</ulink>,
!     and <application>mod_perl</application> on your
      <productname>Apache</productname> web server, you can use
      <literal>AuthType KerberosV5SaveCredentials</literal> with a
      <application>mod_perl</application> script. This gives secure

--ELM1054922935-22372-0_--