Thread: looking for a installation package to Using GSSAPI with Postgres12 for windows

looking for a installation package to Using GSSAPI with Postgres12 for windows

From
"LE MENTEC, SANDRINE"
Date:

Dear postgres community,

 

I am currently working on Postgres 12.5 on a windows server 2016. I need to use Kerberos token for the authentication on the database.

 

To do so, I am looking for an installation executable file for windows with the GSSAPI included. The basic one provided by EDB does not seem to include this features.

 

Do you know where I could find such installer ?

 

Thanks for your help,

Regards,

____________________________________________________________________

Sandrine Le Mentec

Software Engineer

This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain, copy, disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message.

Re: looking for a installation package to Using GSSAPI with Postgres12 for windows

From
Jehan-Guillaume de Rorthais
Date:
Hello,

On Tue, 13 Apr 2021 08:10:06 +0000
"LE MENTEC, SANDRINE" <sandrine.le-mentec@capgemini.com> wrote:

> Dear postgres community,
> 
> I am currently working on Postgres 12.5 on a windows server 2016. I need to
> use Kerberos token for the authentication on the database.
> 
> To do so, I am looking for an installation executable file for windows with
> the GSSAPI included. The basic one provided by EDB does not seem to include
> this features.

I had the same problem and fixed it by using sspi.

If you want to authenticate against a microsoft domain, try to replace "gss"
with "sspi", and maybe set "compat_realm=0" if needed. It will try to use
Kerberos, or fallback on NTLM.

See: https://www.postgresql.org/docs/12/sspi-auth.html

Regards,



RE: looking for a installation package to Using GSSAPI with Postgres12 for windows

From
"LE MENTEC, SANDRINE"
Date:
Hello Jehan-Guillaume,

Thanks a lot for your answer. It looks simplier to use SSPI (witch is already includes).

I have try your suggestion and it seems to work. I need to try some value of the differents parameters to make my test
fullywork (include_realm, compat_realm, upn_username and krb_realm). 

Thanks again,

Regards,

____________________________________________________________________
Sandrine Le Mentec
Software Engineer | CSD

-----Message d'origine-----
De : Jehan-Guillaume de Rorthais <jgdr@dalibo.com>
Envoyé : mardi 13 avril 2021 16:35
À : LE MENTEC, SANDRINE
Cc : pgsql-general@lists.postgresql.org; KOUMIRA, Adnane
Objet : Re: looking for a installation package to Using GSSAPI with Postgres12 for windows

Hello,

On Tue, 13 Apr 2021 08:10:06 +0000
"LE MENTEC, SANDRINE" <sandrine.le-mentec@capgemini.com> wrote:

> Dear postgres community,
>
> I am currently working on Postgres 12.5 on a windows server 2016. I
> need to use Kerberos token for the authentication on the database.
>
> To do so, I am looking for an installation executable file for windows
> with the GSSAPI included. The basic one provided by EDB does not seem
> to include this features.

I had the same problem and fixed it by using sspi.

If you want to authenticate against a microsoft domain, try to replace "gss"
with "sspi", and maybe set "compat_realm=0" if needed. It will try to use Kerberos, or fallback on NTLM.

See: https://www.postgresql.org/docs/12/sspi-auth.html

Regards,
This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It
isintended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized
toread, print, retain, copy, disseminate, distribute, or use this message or any part thereof. If you receive this
messagein error, please notify the sender immediately and delete all copies of this message.