Re: Windows SIngle Sign On - LINUX Server

LDAP will be your best choice for SSO, Ubuntu Linux can authenticate against AD.

Also this is OS stuff not PostgreSQL, if you server is in production and you can not handle this migration,
it is advisable that you subscribe for support on Ubuntu from canonical


Thanks,

Sunday Olutayo





----- Original Message -----
From: "Jeremy Palmer" <JPalmer@linz.govt.nz>
To: pgsql-general@postgresql.org
Sent: Thursday, August 23, 2012 8:12:55 PM
Subject: [GENERAL] Windows SIngle Sign On - LINUX Server

Hi All,

We are currently running PostgreSQL 8.4 on Windows server 2003 and are planning to move the instance to Ubuntu 10.4 -
yay!.At the same time we will also upgrade to 9.1. One nice features that we leverage from the windows configuration is
theability for windows clients to use AD SSO i.e SSPI. This was really easy to set-up and configure. 

If we move to Linux I was wondering if anyone could provide a howto reference or some tips on how to set-up auth
configurationto provide SSO to windows clients? I've read the GSSAPI/Kerberos authentication section of the docs, but
it'sstill unclear to me the exact process to follow. In particular what things would I need to configure on the Ubuntu
serverand which tasks will need to be done on the Windows domain controller (which is managed by a third party service
providerwho knows little about PostgreSQL or Ubuntu) 

We are using a WIndows server 2008 for the domain control. However I know little about it's setup or configuration, I
onlyknow it's our windows domain realm.  

Regards,
Jeremy
This message contains information, which is confidential and may be subject to legal privilege. If you are not the
intendedrecipient, you must not peruse, use, disseminate, distribute or copy this message. If you have received this
messagein error, please notify us immediately (Phone 0800 665 463 or info@linz.govt.nz) and destroy the original
message.LINZ accepts no responsibility for changes to this email, or for any attachments, after its transmission from
LINZ.Thank You. 


--
Sent via pgsql-general mailing list (pgsql-general@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general