Re: psycopg2 and java gssapi questions - Mailing list pgsql-general

From Mike Feld
Subject Re: psycopg2 and java gssapi questions
Date
Msg-id 16075c95f0c-1715-25836@webjas-vae016.srv.aolmail.net
Whole thread Raw
In response to psycopg2 and java gssapi questions  (Mike Feld <m1f7@aol.com>)
List pgsql-general
This shows you how to setup GSSAPI authentication server side, which I have already done and have working. My question is from client side, without a human logged in to generate the ticket.
>>Hello,
>>have a look at

>>https://www.postgresql.org/docs/current/static/auth-methods.html

>>There are details about LDAP and GSSAPI.

>>On 20.12.2017 20:42, Mike F wrote:
>>> Is it possible to authenticate with Postgres from a standalone
>>> application using gssapi? In other words, I am able to authenticate with
>>> Postgres when a human has logged in to either Windows or Linux and
>>> generated a ticket, but is it possible for say a Django site or Java
>>> application running on some server somewhere to authenticate with
>>> Postgres using gssapi? I realize that psycopg2 has a connection
>>> parameter for “krbsrvname”, but how does it generate a ticket? Is this
>>> the only alternative to secure authentication since Postgres does not
>>> support secure ldap (ldaps)?

#AOLMsgPart_1.2_f53961cf-8686-4970-b4f8-52880410ff3e td{color: black;} @font-face {font-family:"Cambria Math"; panose-1:2 4 5 3 5 4 6 3 2 4;}@font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4;}.aolReplacedBody p.aolmail_MsoNormal,.aolReplacedBody li.aolmail_MsoNormal,.aolReplacedBody div.aolmail_MsoNormal {margin:0in; margin-bottom:.0001pt; font-size:12.0pt; font-family:"Times New Roman",serif;}.aolReplacedBody a:link,.aolReplacedBody span.aolmail_MsoHyperlink {mso-style-priority:99; color:blue; text-decoration:underline;}.aolReplacedBody a:visited,.aolReplacedBody span.aolmail_MsoHyperlinkFollowed {mso-style-priority:99; color:purple; text-decoration:underline;}.aolReplacedBody span.aolmail_hoenzb {mso-style-name:hoenzb;}.aolReplacedBody span.aolmail_EmailStyle18 {mso-style-type:personal; font-family:"Calibri",sans-serif; color:#1F497D;}.aolReplacedBody span.aolmail_EmailStyle19 {mso-style-type:personal-reply; font-family:"Calibri",sans-serif; color:#1F497D;}.aolReplacedBody .aolmail_MsoChpDefault {mso-style-type:export-only; font-size:10.0pt;}@page WordSection1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in;}.aolReplacedBody div.aolmail_WordSection1 {page:WordSection1;}

pgsql-general by date:

Previous
From: basti
Date:
Subject: Re: psycopg2 and java gssapi questions
Next
From: support-tiger
Date:
Subject: problems with postgresql 10.1 hba_conf on fedora 27