Re: JAVA Support

Magnus Hagander <mha@sollentuna.net>

From: "Magnus Hagander" <mha@sollentuna.net>

To: "Henry B. Hotz" <hotz@jpl.nasa.gov>

Cc: <pgsql-hackers@postgresql.org>, "Tom Lane" <tgl@sss.pgh.pa.us>, "Thomas Lockhart" <Thomas.G.Lockhart@jpl.nasa.gov>

Date: 2006-09-29T07:34:42Z

Lists: pgsql-hackers

This being SASL:

> > I know I tried to make
> > it work on win32 once and failed miserably. (Then again, I've
> failed
> > on Linux as well, but not quite as bad. And it's not included in
> all
> > Linux distributions, at least it wasn't when I checked a while
> back)
> 
> Well, I know Redhat has RPM's that look reasonable.  I'm not a big
> Linux user myself.  (More a BSD bigot, to be honest.)

Well, Redhat != Linux, really :P

Over to GSSAPI:

> In theory, you get to plug in other mechanisms than Kerberos.  In
> practice I think this only worked on Solaris, until very recently.

FWIW, Microsoft have supported NTLM over GSSAPI since.. eh. Back in
1999, I guess, with the first pre-releases of Windows 2000.

> Wire compatibility with a native Windows API (the SSPI), if it's
> used correctly.  (Google for posts by Jeffrey Altman for references
> to example code.)

This, IMHO, is a big win if we can pull it off. It would significantly
lower the barrier for getting Kerberos working properly in pg on Win32.

//Magnus