Re: GSS Authentication - Mailing list pgsql-general

From Bryan Montgomery
Subject Re: GSS Authentication
Date
Msg-id AANLkTilTrgBTc9bWl0fRPmR8LCcW6yL6VBi2dmmaPMiq@mail.gmail.com
Whole thread Raw
In response to Re: GSS Authentication  (Stephen Frost <sfrost@snowman.net>)
List pgsql-general
Yeah, the interesting thing is we're supposed to move to AES, but on the current AD it isn't available :) Will be a bit ironic if it is all down to using DES!

On Wed, Jun 16, 2010 at 11:05 AM, Stephen Frost <sfrost@snowman.net> wrote:
Greig,
> I finally got it working. Problem was that on the windows side on the service account within the account options, we needed to check "Use DES encryption types for this account". I had that changed on the AD side and that fixed the whole problem.

Great, glad to hear you got it working.  Just to reiterate- you really
should be looking at using a 2008 AD with AES encryption types instead
of DES.  DES is depreciated and no longer secure given today's
computers.

       Thanks,

               Stephen

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkwY6CwACgkQrzgMPqB3kig89wCfWlskljcakITdMRFGlW55BM0B
qrMAn0M0sHJh5UrEVSqTO3saRGuYLPQC
=KWMB
-----END PGP SIGNATURE-----


pgsql-general by date:

Previous
From: Scott Marlowe
Date:
Subject: Re: postgres crash SOS
Next
From: Bryan Montgomery
Date:
Subject: Question about indexes on tables with inherited children