Skip site navigation (1) Skip section navigation (2)

Re: GSSAPI or Kerberos authentication problems

From: Mike Warnecke <mike(at)audiowarehouse(dot)ca>
To: Kris Jurka <books(at)ejurka(dot)com>
Cc: pgsql-jdbc(at)postgresql(dot)org
Subject: Re: GSSAPI or Kerberos authentication problems
Date: 2005-09-14 21:48:11
Message-ID: 1126734491.5593.27.camel@theta.audiowarehouse.sk.ca (view raw or flat)
Thread:
Lists: pgsql-hackerspgsql-jdbc
On Wed, 2005-14-09 at 16:00 -0500, Kris Jurka wrote:
> 
> On Wed, 14 Sep 2005, Mike Warnecke wrote:
> 
> > I'm using the postgresql-jdbc driver with OpenOffice.org 2.0, and I
> > can't get it to use GSSAPI authentication using my Kerberos credentials.
> > I have no other apps that use postgresql-jdbc, but it appears as though
> > the problem is in this driver, not OOo.
> >
> > psql And other apps using the native PostgreSQL interface work fine
> > using Kerberos authentication, just not JDBC.
> >
> > Does the postgresql-jdbc driver support Kerberos/GSSAPI authentication?
> > If not, what is required to get it done?
> >
> 
> The JDBC driver does not currently support kerberos auth.  Since the 
> driver is pure Java we cannot rely on the standard postgresql client 
> library (libpq) and its kerberos support.  When the driver was initially 
> written the only kerberos support available required separate third party 
> libraries.  With the availability of JAAS in JDK 1.3 and subsequent 
> integration in JDK 1.4 that is no longer the case.  I imagine someone 
> familiar with JAAS and kerberos could add support to the driver relatively 
> easily, but Java and kerberos do not seem like a common combination (at 
> least in the Postgresql world).  Without the expertise or the demand for 
> this feature it doesn't seem likely that it will happen anytime soon.

So, if I need it, I'll need to learn JAAS, and contribute it then,
right?

As far as nobody using JDBC, PostgreSQL, and Kerberos together, I can't
understand why a single sign-on architecture with real security wouldn't
be more popular.  But then again, look at the number of people still
using Zip encryption...

I think you've given me the necessary information with respect to JAAS
though.  Thanks!


-- 
Mike Warnecke <mike(at)audiowarehouse(dot)ca>
Audio Warehouse

In response to

Responses

pgsql-hackers by date

Next:From: Kris JurkaDate: 2005-09-14 22:04:55
Subject: Re: GSSAPI or Kerberos authentication problems
Previous:From: Martijn van OosterhoutDate: 2005-09-14 21:47:23
Subject: Re: Constraint Type Coercion issue?

pgsql-jdbc by date

Next:From: Kris JurkaDate: 2005-09-14 22:04:55
Subject: Re: GSSAPI or Kerberos authentication problems
Previous:From: Kris JurkaDate: 2005-09-14 21:00:22
Subject: Re: GSSAPI or Kerberos authentication problems

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group