Re: SSPI authentication - Mailing list pgsql-hackers

From Dave Page
Subject Re: SSPI authentication
Date
Msg-id 469DD2D2.9080102@postgresql.org
Whole thread Raw
In response to Re: SSPI authentication  (Magnus Hagander <magnus@hagander.net>)
Responses Re: SSPI authentication  (Magnus Hagander <magnus@hagander.net>)
List pgsql-hackers
Magnus Hagander wrote:
> Dave Page wrote:
>> Magnus Hagander wrote:
>>> So what we'd need in that case is a new libpq connectionstring
>>> parameter. Which can be done, but it'd require that all frontends that
>>> use libpq add support for it - such as pgadmin. I'm not sure if the ODBC
>>> driver will support arbitrary arguments, otherwise that one needs it too.
>>>
>>> As I'm sure you can tell, I'm far from convinced this is a good idea ;-)
>>> Anybody else want to comment on this?
>> The ODBC driver would need modification (as would pgAdmin of course).
>> Whats more of a concern is that we already have ODBC connection strings
>> that can be too long - adding yet another option will make that worse of
>> course.
> 
> Interesting, didn't know that. That makes that option even less interesting.
> 
> Can you comment on if the current ODBC driver will pick up GSSAPI
> authentication from libpq or if it needs new code to deal with it? I
> never quite figured out how they integrate with libpq for the
> authentication part since it moved away from using libpq for everything
> again.

It should 'just work' I guess - it does for the existing Kerberos
support. I never really studied GSSAPI though so I may be missing some
fundamental point.

/D



pgsql-hackers by date:

Previous
From: Peter Eisentraut
Date:
Subject: Re: postgresql compile problem
Next
From: "Simon Riggs"
Date:
Subject: Re: SetBufferCommitInfoNeedsSave and race conditions