Re: JAVA Support

Josh Berkus <josh@agliodbs.com>

From: "Josh Berkus" <josh@agliodbs.com>

To: Tom Lane <tgl@sss.pgh.pa.us>,"Magnus Hagander" <mha@sollentuna.net>

Cc: "Henry B. Hotz" <hotz@jpl.nasa.gov>, pgsql-hackers@postgresql.org

Date: 2006-09-28T22:03:32Z

Lists: pgsql-hackers

Tom,

> It would depend in part on the size of the patch, and on whether
> there
> are any arguments for supporting GSSAPI besides "Java can't do
> Kerberos".
> What would it buy for a libpq user?

According to the Solaris Security engineers, GSSAPI is more secure than
using the Kerberos headers.  Also, in theory GSSAPI is supposed to
support multiple authentication back-ends (ldap, liberty, etc.), but I
personally have never seen support for anything but Kerberos.


Josh Berkus
PostgreSQL @ Sun
San Francisco 415-752-2500