Re: [GENERAL] Windows SIngle Sign On - LINUX Server

2012-08-25 Thread Craig Ringer
On 08/25/2012 04:29 AM, Jeremy Palmer wrote: Marcus' guide looks great. So what's the pros/cons of using the Kerberos via GSSAPI method, rather than going for the SingleSignOn method mentioned by Sunday? The method on the Ubuntu wiki applies to the host OS as a whole. Pg will still need to

Re: [GENERAL] Windows SIngle Sign On - LINUX Server

2012-08-25 Thread Chris Travers
On Fri, Aug 24, 2012 at 1:29 PM, Jeremy Palmer jpal...@linz.govt.nz wrote: Marcus' guide looks great. So what's the pros/cons of using the Kerberos via GSSAPI method, rather than going for the SingleSignOn method mentioned by Sunday? Cons: More complicated to set up. There are a few odd

Re: [GENERAL] Windows SIngle Sign On - LINUX Server

2012-08-24 Thread SUNDAY A. OLUTAYO
- Original Message - From: Jeremy Palmer jpal...@linz.govt.nz To: pgsql-general@postgresql.org Sent: Thursday, August 23, 2012 8:12:55 PM Subject: [GENERAL] Windows SIngle Sign On - LINUX Server Hi All, We are currently running PostgreSQL 8.4 on Windows server 2003 and are planning to move

Re: [GENERAL] Windows SIngle Sign On - LINUX Server

2012-08-24 Thread Craig Ringer
On 08/24/2012 06:10 PM, SUNDAY A. OLUTAYO wrote: LDAP will be your best choice for SSO, Ubuntu Linux can authenticate against AD. I'm not at all convinced by that. Active Directory functions as a Kerberos KDC. Kerberos provides secure authentication and (unlike LDAP) single sign-on.

Re: [GENERAL] Windows SIngle Sign On - LINUX Server

2012-08-24 Thread SUNDAY A. OLUTAYO
To: SUNDAY A. OLUTAYO olut...@sadeeb.com Cc: Jeremy Palmer jpal...@linz.govt.nz, pgsql-general@postgresql.org Sent: Friday, August 24, 2012 12:48:01 PM Subject: Re: [GENERAL] Windows SIngle Sign On - LINUX Server On 08/24/2012 06:10 PM, SUNDAY A. OLUTAYO wrote: LDAP will be your best choice for SSO

Re: [GENERAL] Windows SIngle Sign On - LINUX Server

2012-08-24 Thread Jeremy Palmer
. To: Craig Ringer Cc: Jeremy Palmer; pgsql-general@postgresql.org Subject: Re: [GENERAL] Windows SIngle Sign On - LINUX Server In real world deployment, LDAP and Kerbero are often combined for authentication and authorization. The link below is a well documented howto: https://help.ubuntu.com/community

[GENERAL] Windows SIngle Sign On - LINUX Server

2012-08-23 Thread Jeremy Palmer
Hi All, We are currently running PostgreSQL 8.4 on Windows server 2003 and are planning to move the instance to Ubuntu 10.4 - yay!. At the same time we will also upgrade to 9.1. One nice features that we leverage from the windows configuration is the ability for windows clients to use AD SSO