> > > > You can do this today using PAM authenication, but this is
> > > not always
> > > > possible. Notably it's never possible on Windows, and there are
> > > > several unix platforms/distros that don't support it
> > > without a lot of
> > > > work.
> > >
> > > Or you port PAM to Windows, and then everybody wins.
> >
> > Well, for one that's going to be a *lot* more work. I'm not
> even sure
> > how many of the concepts would apply to win32, but then I
> don't really
> > know PAM...
> >
>
> Most of the work has already been done:
>
> http://pgina.xpasystems.com/
Eh, no, that one works the other way around, adn doesn't help us at all.
GINA for windows is about the same as PAM is for Unix. Allows pluggable
authentication. But we don't support GINA authentication.
I guess we could support GINA authentication instead of LDAP, which
would add the benefit of supporting windows passwords (withotu single
sign on) for local accounts. But it would also make the hurdle a whole
lot larger for anybody wanting to do ldap auth for postgres -
installilng a GINA changes *all* the authentication on windows. Which
means you could use those accounts to log on to the system, which you
probalby don't want...
//Magnus