Обсуждение: looking for a installation package to Using GSSAPI with Postgres12 for windows
looking for a installation package to Using GSSAPI with Postgres12 for windows
I am currently working on Postgres 12.5 on a windows server 2016. I need to use Kerberos token for the authentication on the database.
To do so, I am looking for an installation executable file for windows with the GSSAPI included. The basic one provided by EDB does not seem to include this features.
Do you know where I could find such installer ?
Thanks for your help,
Regards,
____________________________________________________________________
Sandrine Le Mentec
Software Engineer
This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain, copy, disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message.
Re: looking for a installation package to Using GSSAPI with Postgres12 for windows
Hello, On Tue, 13 Apr 2021 08:10:06 +0000 "LE MENTEC, SANDRINE" <sandrine.le-mentec@capgemini.com> wrote: > Dear postgres community, > > I am currently working on Postgres 12.5 on a windows server 2016. I need to > use Kerberos token for the authentication on the database. > > To do so, I am looking for an installation executable file for windows with > the GSSAPI included. The basic one provided by EDB does not seem to include > this features. I had the same problem and fixed it by using sspi. If you want to authenticate against a microsoft domain, try to replace "gss" with "sspi", and maybe set "compat_realm=0" if needed. It will try to use Kerberos, or fallback on NTLM. See: https://www.postgresql.org/docs/12/sspi-auth.html Regards,
RE: looking for a installation package to Using GSSAPI with Postgres12 for windows
Hello Jehan-Guillaume, Thanks a lot for your answer. It looks simplier to use SSPI (witch is already includes). I have try your suggestion and it seems to work. I need to try some value of the differents parameters to make my test fullywork (include_realm, compat_realm, upn_username and krb_realm). Thanks again, Regards, ____________________________________________________________________ Sandrine Le Mentec Software Engineer | CSD -----Message d'origine----- De : Jehan-Guillaume de Rorthais <jgdr@dalibo.com> Envoyé : mardi 13 avril 2021 16:35 À : LE MENTEC, SANDRINE Cc : pgsql-general@lists.postgresql.org; KOUMIRA, Adnane Objet : Re: looking for a installation package to Using GSSAPI with Postgres12 for windows Hello, On Tue, 13 Apr 2021 08:10:06 +0000 "LE MENTEC, SANDRINE" <sandrine.le-mentec@capgemini.com> wrote: > Dear postgres community, > > I am currently working on Postgres 12.5 on a windows server 2016. I > need to use Kerberos token for the authentication on the database. > > To do so, I am looking for an installation executable file for windows > with the GSSAPI included. The basic one provided by EDB does not seem > to include this features. I had the same problem and fixed it by using sspi. If you want to authenticate against a microsoft domain, try to replace "gss" with "sspi", and maybe set "compat_realm=0" if needed. It will try to use Kerberos, or fallback on NTLM. See: https://www.postgresql.org/docs/12/sspi-auth.html Regards, This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It isintended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized toread, print, retain, copy, disseminate, distribute, or use this message or any part thereof. If you receive this messagein error, please notify the sender immediately and delete all copies of this message.