>>>>> "Steve" == Steve Langasek <[EMAIL PROTECTED]> writes:
Steve> Does the Kerberos support in Postgres represent appropriate
Steve> groundwork for proper Kerberos authentication, or is it
Steve> another cleartext-password-proxy approach to Kerberos like
Steve> pam_krb5?
Not really. It calls sendauth and that's it. Doesn't even
authenticate the postgres username.
Since postgres actually supports stream encryption these days it
shouldn't be too hard to implement GSSAPI, SASL or krb_priv though. I
suspect you'd use very little of the existing code.
________________________________________________
Kerberos mailing list [EMAIL PROTECTED]
http://mailman.mit.edu/mailman/listinfo/kerberos
