Re: [Patch] Using Windows groups for SSPI authentication

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Russell Foster <russell(dot)foster(dot)coding(at)gmail(dot)com>
Cc: pgsql-hackers(at)postgresql(dot)org
Subject: Re: [Patch] Using Windows groups for SSPI authentication
Date: 2020-10-13 20:32:21
Message-ID: 3488065.1602621141@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Russell Foster <russell(dot)foster(dot)coding(at)gmail(dot)com> writes:
> I understand your concerns overall, and the solution you propose seems
> reasonable. But are we just using "windows-group" because the code is not
> there today to check for a user in another OS group?

It's not clear to me whether Windows groups have exact equivalents in
other OSes. If we think the concept is generic, I'd be okay with
spelling the keyword system-group or the like. The patch you
proposed looked pretty Windows-specific though. Somebody with more
SSPI knowledge than me would have to opine on whether "sspi-group"
is a reasonable name.

regards, tom lane

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Russell Foster 2020-10-13 21:08:55 Re: [Patch] Using Windows groups for SSPI authentication
Previous Message Justin Pryzby 2020-10-13 20:20:31 Re: avoid bitmapOR-ing indexes with scan condition inconsistent with partition constraint