2009/10/17 Tom Lane <tgl@sss.pgh.pa.us>:
> If you decide to go with this approach and use PAM as intermediary,
> you'll need the patch I just committed in response to bug #5121 --- it
> turns out nobody had ever tried that with Postgres before :-(. But
> I think it's also possible to just use PG's native Kerberos support
> with AD, which would explain why nobody had tried it.
It most definitely is possible. Note that the recommendation is to
use GSSAPI with Kerberos and not the native "krb5" authentication for
tihs if possible.
--
Magnus Hagander
Me: http://www.hagander.net/
Work: http://www.redpill-linpro.com/