Hey there,
I developed a program where you must authenticate on startup. Now my
users already authenticate themselves when they login on Windows, so
basically they authenticate twice. To avoid this, the docs told me to
use GSSAPI or SSPI as psql authentication method, so my program could
use the Windows login information for connecting to PSQL.
My questions are:
1. SSPI or GSSAPI?
2. How do I set this up?
3. How do I handle it?
1. SSPI or GSSAPI?
Right now I tried getting sspi to work as at least I understood that I
had to replace md5 in pg_hba.conf with sspi. Replacing md5 with gssapi
gave me an error message. The docs aren't really clear here.
2. How do I set this up?
All clients connect to the server via RDP, so basically everyone works
/directly/ on the server (at least thats how I understand RDP). It's a
Windows Server.
My developer machine is a Windows XP machine and I tried setting up
sspi locally (I can't use the server for playground testing). Strange
behaviour: now pgAdmin asks me for the password of the user "postgres"
again, although it should actually connect as "Thomas". I tried a lot
of things, but I can't explain them here as I just did trial&error.
None worked.
3. How do I handle it?
Are Windows users automatically added to the psql database? How do I sync them?
How do I connect to psql, just specify no username/password and hit connect?
I know those are a lot of quite big questions. I'm entirely new to
that topic, I hope you can help me though!
Best regards
Thomas Walther