Brian,
* Brian Crowell (brian@fluggo.com) wrote:
> However, the eventual goal was to connect to this same server from a
> .NET app running on Windows, and here I've run into a snag. The Npgsql
> library does not support GSSAPI—it only supports SSPI, which is
> nearly-but-not-enough-like the same thing to count in this situation,
Uhhh, why not?
> because I can't seem to configure my PostgreSQL on Linux to accept
> SSPI. If I try it, I get the error:
Nono, you don't try to build SSPI on Linux- that's Microsoft's
implementation of GSSAPI (more-or-less). You continue to use GSSAPI on
Linux...
> The docs say that SSPI is supported if GSSAPI is available
> (http://www.postgresql.org/docs/9.3/static/auth-methods.html#SSPI-AUTH).
> Is this just a matter of me running the wrong build? I'm using
> PostgreSQL 9.3 from the official builds for Debian 6.
The docs could probably be a bit clearer.
> If the docs are wrong, and SSPI isn't available server-side on Linux,
> what are my other options?
Build the server-side w/ GSSAPI. Your Linux system can then either join
the Windows AD domain (you'll need to create a princ on the AD and then
export it over to the Linux box), or set up two KDCs (one on Linux, one
for AD) and then have a cross-realm trust.
Thanks,
Stephen