Skip site navigation (1) Skip section navigation (2)

Re: JAVA Support

From: "Joshua D(dot) Drake" <jd(at)commandprompt(dot)com>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: Josh Berkus <josh(at)agliodbs(dot)com>, "Henry B(dot) Hotz" <hotz(at)jpl(dot)nasa(dot)gov>, Kris Jurka <books(at)ejurka(dot)com>, pgsql-hackers(at)postgresql(dot)org
Subject: Re: JAVA Support
Date: 2006-09-29 05:17:02
Message-ID: 451CAC4E.5080309@commandprompt.com (view raw or flat)
Thread:
Lists: pgsql-hackers
Tom Lane wrote:
> "Joshua D. Drake" <jd(at)commandprompt(dot)com> writes:
>> Is there any reason why we haven't built a generic authentication API?
>> Something like PAM, except cross platform?
> 
> We're database geeks, not security/crypto/authentication geeks.  What
> makes you think we have any particular competence to do the above?

Well that is a valid point :). I was just asking.
Joshua D. Drake


> 
> Actually, the part of this proposal that raised my hackles the most was
> the claim that GSSAPI provides a generic auth API, because that was
> exactly the bill of goods we were sold in connection with PAM.  (So why
> is this our problem at all --- can't you make a PAM plugin for it??)
> It didn't help any that that was shortly followed by the lame admission
> that no one has ever implemented anything except Kerberos underneath it.
> Word to the wise, guys: go *real* soft on vaporware claims for auth
> stuff, because we've seen enough of those before.
> 
> 			regards, tom lane
> 


-- 

   === The PostgreSQL Company: Command Prompt, Inc. ===
Sales/Support: +1.503.667.4564 || 24x7/Emergency: +1.800.492.2240
   Providing the most comprehensive  PostgreSQL solutions since 1997
             http://www.commandprompt.com/



In response to

pgsql-hackers by date

Next:From: Albe LaurenzDate: 2006-09-29 07:11:38
Subject: Re: Backup and restore through JDBC
Previous:From: Tom LaneDate: 2006-09-29 04:35:43
Subject: Re: JAVA Support

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group