[SSPI] Windows group support

From: The Dude <russman7474(at)gmail(dot)com>
To: pgsql-hackers(at)lists(dot)postgresql(dot)org
Subject: [SSPI] Windows group support
Date: 2020-04-21 13:48:09
Message-ID: CA+bhM4LXGi49XeGBGNd10xk8xwP_OsenDGgAxLd_XQKPCgrVeQ@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Hi,

I have some code that I've been using in production that supports adding
and authenticating Windows groups via the pg_ident file. It has a new
indicator (+), that signifies the identifier is a Windows group, as in the
following example:

# MAPNAME SYSTEM-USERNAME PG-USERNAME
"Users" "+User group" postgres

A new function was added to test if a user token is in the windows group:

/*
* Check if the user (sspiToken) is a member of the specified group
*/
static BOOL
sspi_user_is_in_group(HANDLE sspiToken, LPCTSTR groupName)

I wanted to share this as a patch for the latest, as soon as I port it to
v12. Does this sound reasonable?

thanks,
Russell

Browse pgsql-hackers by date

  From Date Subject
Next Message Tom Lane 2020-04-21 13:59:07 Re: Fix for pg_statio_all_tables
Previous Message Fujii Masao 2020-04-21 13:08:56 Re: Remove non-fast promotion Re: Should we remove a fallback promotion? take 2