SSPI authentication - patch
От | Magnus Hagander |
---|---|
Тема | SSPI authentication - patch |
Дата | |
Msg-id | 20070718101642.GA3787@svr2.hagander.net обсуждение исходный текст |
Ответы |
Re: SSPI authentication - patch
|
Список | pgsql-patches |
Attached is the patch to support SSPI authentication in libpq. With this patch, I can authenticate windows clients against a linux server using kerberos *without* reqiring setting up MIT kerberos on the windows side. Protocol has not changed at all. For now, it's implemented as mutually exclusive with the MIT version. This can of course be changed, but I have yet to see a good way how to expose the difference to the app. By setting it up the way it is, some code is shared between GSSAPI and SSPI, which is also why the SSPI functions are just different versions of the pg_GSS_startup/continue functions. If we want to support both, those will of course have to be changed. I have not set up autoconf for it yet, pending the outcome of the discussion about what should be default. What in envision doing there is the same as what I've done for MSVC so far - enable SSPI unless --enable-gss is specified, in which case SSPI is disabled and GSSAPI is enabled instead. I'll be working on the server side as well ;-), but getting libpq is the most important part of it. Comments? If there are none, I'll apply this version soon. //Magnus
Вложения
В списке pgsql-patches по дате отправления: