Postgres Pro
Downloads
Home   >   mailing lists

Thread: Kerberos-Postgresql implementation for user authentication

Kerberos-Postgresql implementation for user authentication

From
Brajendra Pratap Singh
Date:
Hi,

Please share the steps to implement the Kerberos with postgresql for user authentication purpose. Also share the document if any.

Thanks,
Brajendra

SV: Kerberos-Postgresql implementation for user authentication

From
Niels Jespersen
Date:

 

 

Fra: Brajendra Pratap Singh <singh.bpratap766@gmail.com>
Sendt: 9. juli 2020 09:05
Til: pgsql-general@postgresql.org
Emne: Kerberos-Postgresql implementation for user authentication

 

Hi,

 

Please share the steps to implement the Kerberos with postgresql for user authentication purpose. Also share the document if any.

 

Thanks,

Brajendra

 

If you are trying to do passwordless login for windows users, then this explains that scenario quite well. We are using SSPI for end-users.

 

https://wiki.postgresql.org/wiki/Configuring_for_single_sign-on_using_SSPI_on_Windows

 

 

Re: Kerberos-Postgresql implementation for user authentication

From
Michael Holzman
Date:

On Thu, Jul 9, 2020 at 11:22 AM Niels Jespersen wrote:

 

 

Fra: Brajendra Pratap Singh
Emne: Kerberos-Postgresql implementation for user authentication

 

 

Please share the steps to implement the Kerberos with postgresql for user authentication purpose. Also share the document if any.


If you are trying to do passwordless login for windows users, then this explains that scenario quite well. We are using SSPI for end-users.

 

https://wiki.postgresql.org/wiki/Configuring_for_single_sign-on_using_SSPI_on_Windows

 

You can also read these posts:

 



--
Regards,
    Michael Holzman

Re: Kerberos-Postgresql implementation for user authentication

From
Brajendra Pratap Singh
Date:
Hi Niels,

Thanks for your prompt response and I apologise for the incomplete information.
Actually we are trying to implement the Kerberos authentication while anyone trying to connect with postgresql DB user/role. 

Plz help us here with document.

Postgresql-DB version : 9.6/10/11/12
OS version : CentOS 6.9/7/8 

Thanks,
Brajendra

On Thu, 9 Jul, 2020, 1:52 PM Niels Jespersen, <NJN@dst.dk> wrote:

 

 

Fra: Brajendra Pratap Singh <singh.bpratap766@gmail.com>
Sendt: 9. juli 2020 09:05
Til: pgsql-general@postgresql.org
Emne: Kerberos-Postgresql implementation for user authentication

 

Hi,

 

Please share the steps to implement the Kerberos with postgresql for user authentication purpose. Also share the document if any.

 

Thanks,

Brajendra

 

If you are trying to do passwordless login for windows users, then this explains that scenario quite well. We are using SSPI for end-users.

 

https://wiki.postgresql.org/wiki/Configuring_for_single_sign-on_using_SSPI_on_Windows

 

 

Re: Kerberos-Postgresql implementation for user authentication

From
Christopher Browne
Date:
On Thu, 9 Jul 2020 at 10:15, Brajendra Pratap Singh <singh.bpratap766@gmail.com> wrote:
Hi Niels,

Thanks for your prompt response and I apologise for the incomplete information.
Actually we are trying to implement the Kerberos authentication while anyone trying to connect with postgresql DB user/role. 

Plz help us here with document.

The offerings you'll see here are going to be rather more generic; this is a public mailing list where you will get general sorts of answers.

The generic "best answer" is to point to the standard documentation.  You should review, for each version of PostgreSQL you are interested in, the appropriate version of https://www.postgresql.org/docs/12/client-authentication.html, and most likely, what you should be looking at is the sections on GSSAPI.

And you have received some links to other material that appears to have useful explanations.  Of course, nobody cooked that into a document that speaks procedurally to your purposes on your several versions of CentOS and of PostgreSQL; they pointed to explanations and tutorial material.

If you require a "procedural document" prepared in custom fashion, tailored to your specific local requirements, then I rather think you will need to engage one of the numerous firms that are available to provide those sorts of professional services.  Here is a link to where you can find some such: