Re: GSSAPI server side on Linux, SSPI client side on Windows

Brian,

* Brian Crowell (brian(at)fluggo(dot)com) wrote:
> However, the eventual goal was to connect to this same server from a
> .NET app running on Windows, and here I've run into a snag. The Npgsql
> library does not support GSSAPI—it only supports SSPI, which is
> nearly-but-not-enough-like the same thing to count in this situation,

Uhhh, why not?

> because I can't seem to configure my PostgreSQL on Linux to accept
> SSPI. If I try it, I get the error:

Nono, you don't try to build SSPI on Linux- that's Microsoft's
implementation of GSSAPI (more-or-less). You continue to use GSSAPI on
Linux...

> The docs say that SSPI is supported if GSSAPI is available
> (http://www.postgresql.org/docs/9.3/static/auth-methods.html#SSPI-AUTH)
> Is this just a matter of me running the wrong build? I'm using
> PostgreSQL 9.3 from the official builds for Debian 6.

The docs could probably be a bit clearer.

> If the docs are wrong, and SSPI isn't available server-side on Linux,
> what are my other options?

Build the server-side w/ GSSAPI. Your Linux system can then either join
the Windows AD domain (you'll need to create a princ on the AD and then
export it over to the Linux box), or set up two KDCs (one on Linux, one
for AD) and then have a cross-realm trust.

Thanks,

Stephen