Обсуждение: Fwd: [GENERAL] Trying to get SSPI/JDBC working

> JDBC connection url:
> "jdbc:postgresql://localhost/postgresDB?integratedSecurity=true"

I don't know where you got "integratedSecurity=true". The only reference
I can find to that is in Microsoft's documentation for MS SQL server.
There is no such parameter in PgJDBC, nor in core PotsgreSQL.

Until very recently (i.e. last week) PgJDBC did not support SSPI
natively. It was potentially possible to use it via direct access to the
Kerberos ticket, but it required lots of setup and was generally painful
and impractical.

I implemented SSPI support for PgJDBC a few weeks ago, and merged it
into the core driver this week. If you download the latest git tree of
PgJDBC and compile it, you will be able to use SSPI. No additional
parameters should be required.

There is not yet a binary release of the driver with SSPI support, but
it's pretty easy to compile PgJDBC if you've used git before. Just clone
the repository from https://github.com/pgjdbc/pgjdbc and then "ant -lib
lib all" in the source tree. You can also "ant -lib lib dist" if you
want to make a distribution zip file. See the README shown at the bottom
of https://github.com/pgjdbc/pgjdbc for more details.

--
 Craig Ringer                   http://www.2ndQuadrant.com/
 PostgreSQL Development, 24x7 Support, Training & Services

On 12/03/2014 10:14 PM, Dave Rosckes wrote:
> Craig,
>
> Thanks for implementing the SSPI support for PgJDBC. When will the new
> PgJDBC be released?
>
> I have never used git before, so if there is a place I can download the
> jdbc jar with the SSPI support that would be great.  If that is not an
> option, I will look into setting up a git environment.


Dave,

(Please reply-to-all, so the mailing list sees the conversation for
others' benefit later, searches, etc.)

There's no set release date for the first 9.4.x driver at this point.
We'll likely release some time after PostgreSQL 9.4.0 goes final, when
time permits. Resources for PgJDBC driver development are unfortunately
extremely limited.

I can send you a .zip of the jar and dependencies if you don't want to
build with git. It'll just be a build of the latest git master head
produced with "ant dist", and it'll very much be a "no guarantees, no
promises" snapshot build. You'd need to tell me what JDBC version / JDK
version you need. I won't necessarily be able to follow up with new
builds if you need newer snapshots though, so I really recommend
learning to compile it yourself.

git is pretty friendly for the basics, and it's a tool I think every
developer should become familiar with. Perhaps now is a good
opportunity? All you need to build the driver is git (to check it out
from revision control) and ant (to build it), plus a JDK matching the
version you want.

msysgit offers a pretty nice GUI for basic git operations on Windows:

http://git-scm.com/download/win

http://msysgit.github.io/

and the README for the PgJDBC driver explains how to compile it. If you
have problems compiling it, please follow up on the PgJDBC mailing list.


--
 Craig Ringer                   http://www.2ndQuadrant.com/
 PostgreSQL Development, 24x7 Support, Training & Services

On 12/04/2014 10:31 PM, Dave Rosckes wrote:
>
> I got git working and have built the latest version of the PgJDBC
> (postgresql-9.4-1200.jdbc4.jar which includes the SSPI support).  Do I
> need to also use Postgres 9.4 (RC1) with this JDBC, or should it work
> with the 9.3 version I currently have installed?

Great, I'm glad to hear it.

The 9.4 JDBC driver supports at least as far back as PostgreSQL 8.2.
You'll be quite fine using it on 9.3.

--
 Craig Ringer                   http://www.2ndQuadrant.com/
 PostgreSQL Development, 24x7 Support, Training & Services