Re: [HACKERS] Kerberos 5 breakage. - Mailing list pgsql-hackers

From Tom Ivar Helbekkmo
Subject Re: [HACKERS] Kerberos 5 breakage.
Date
Msg-id 86som47u3f.fsf@barsoom.Hamartun.Priv.NO
Whole thread Raw
In response to Re: [HACKERS] Kerberos 5 breakage.  ("Matthew N. Dodd" <winter@jurai.net>)
Responses Re: [HACKERS] Kerberos 5 breakage.  ("Matthew N. Dodd" <winter@jurai.net>)
List pgsql-hackers
"Matthew N. Dodd" <winter@jurai.net> writes:

> I've compiled with kerberos 4 compatibility mode libraries in kerberos 5
> and it appears to compile, link and run but I've not got a good testbed
> for kerberos 4.

The Kerberos 4 stuff works fine with real Kerberos 4 libraries.

> While Kerberos 5 authentication and authorization is nice, I'd like to
> investigate the possibility of adding encryption as well.

Absolutely.  This should be specified in the pg_hba.conf file, so that
you could demand Kerberos authentication plus encryption for sensitive
data.  When not demanded by pg_hba.conf, it should be a client option.

-tih
--
Popularity is the hallmark of mediocrity.  --Niles Crane, "Frasier"

pgsql-hackers by date:

Previous
From: Bruce Momjian
Date:
Subject: Re: [HACKERS] sorting big tables :(
Next
From: "Matthew N. Dodd"
Date:
Subject: Re: [HACKERS] Kerberos 5 breakage.