Kerberos-Postgresql implementation for user authentication

Fra: Brajendra Pratap Singh <singh.bpratap766@gmail.com>
Sendt: 9. juli 2020 09:05
Til: pgsql-general@postgresql.org
Emne: Kerberos-Postgresql implementation for user authentication

Hi,

Please share the steps to implement the Kerberos with postgresql for user authentication purpose. Also share the document if any.

Thanks,
Brajendra

If you are trying to do passwordless login for windows users, then this explains that scenario quite well. We are using SSPI for end-users.

https://wiki.postgresql.org/wiki/Configuring_for_single_sign-on_using_SSPI_on_Windows

On Thu, Jul 9, 2020 at 11:22 AM Niels Jespersen wrote:

*Fra:* Brajendra Pratap Singh
*Emne:* Kerberos-Postgresql implementation for user authentication

Please share the steps to implement the Kerberos with postgresql for user
authentication purpose. Also share the document if any.

If you are trying to do passwordless login for windows users, then this
explains that scenario quite well. We are using SSPI for end-users.

https://wiki.postgresql.org/wiki/Configuring_for_single_sign-on_using_SSPI_on_Windows

You can also read these posts:

https://info.crunchydata.com/blog/windows-active-directory-postgresql-gssapi-kerberos-authentication
https://www.highgo.ca/2020/03/18/postgresql-gssapi-authentication-with-kerberos-part-1-how-to-setup-kerberos-on-ubuntu/
https://www.highgo.ca/2020/03/26/postgresql-gssapi-authentication-with-kerberos-part-2-postgresql-configuration/
https://www.highgo.ca/2020/03/30/postgresql-gssapi-authentication-with-kerberos-part-3-the-status-of-authentication-encryption-and-user-principal/

--
Regards,
Michael Holzman

Hi Niels,

Thanks for your prompt response and I apologise for the incomplete
information.
Actually we are trying to implement the Kerberos authentication while
anyone trying to connect with postgresql DB user/role.

Plz help us here with document.

Postgresql-DB version : 9.6/10/11/12
OS version : CentOS 6.9/7/8

Thanks,
Brajendra

On Thu, 9 Jul, 2020, 1:52 PM Niels Jespersen, <NJN@dst.dk> wrote:

On Thu, 9 Jul 2020 at 10:15, Brajendra Pratap Singh <
singh.bpratap766@gmail.com> wrote:

Hi Niels,

Thanks for your prompt response and I apologise for the incomplete
information.
Actually we are trying to implement the Kerberos authentication while
anyone trying to connect with postgresql DB user/role.

Plz help us here with document.

The offerings you'll see here are going to be rather more generic; this is
a public mailing list where you will get general sorts of answers.

The generic "best answer" is to point to the standard documentation. You
should review, for each version of PostgreSQL you are interested in, the
appropriate version of
https://www.postgresql.org/docs/12/client-authentication.html, and most
likely, what you should be looking at is the sections on GSSAPI.

And you have received some links to other material that appears to have
useful explanations. Of course, nobody cooked that into a document that
speaks procedurally to your purposes on your several versions of CentOS and
of PostgreSQL; they pointed to explanations and tutorial material.

If you require a "procedural document" prepared in custom fashion, tailored
to your specific local requirements, then I rather think you will need to
engage one of the numerous firms that are available to provide those sorts
of professional services. Here is a link to where you can find some such:

https://www.postgresql.org/support/professional_support/