Re: Plans for 8.4 - Mailing list pgsql-hackers

From Stephen Frost
Subject Re: Plans for 8.4
Date
Msg-id 20080731024841.GR16005@tamriel.snowman.net
Whole thread Raw
In response to Re: Plans for 8.4  ("Henry B. Hotz" <hbhotz@oxy.edu>)
Responses Re: Plans for 8.4  (Magnus Hagander <magnus@hagander.net>)
List pgsql-hackers
* Henry B. Hotz (hbhotz@oxy.edu) wrote:
> I'm making no promises, but what would people think of a hostgss hba
> option?

As described, sounds like a win to me.  It'd be very nice to be able to
just use GSSAPI encryption on the link.  That, combined w/ Magnus' work
on username/princ mappings, would really bring PostgreSQL up to date wrt
GSSAPI support.

It'd really be great to have this support in the ODBC and JDBC drivers
too..  I think in JDBC it might 'just work', I'm less sure about ODBC.

As a practical question- would you really need a seperate explicit
pg_hba option for it?  It'd be nice to be able to require it, if
desired, but that strikes me as more sensible as an option to the 'gss'
auth mechanism?
Thanks!
    Stephen

pgsql-hackers by date:

Previous
From: "Henry B. Hotz"
Date:
Subject: Re: Plans for 8.4
Next
From: Tom Lane
Date:
Subject: Re: Plans for 8.4