Skip to content
Snippets Groups Projects
Commit dc65b22f authored by Bruce Momjian's avatar Bruce Momjian
Browse files

Add README.kerbros

parent 9500b35f
No related branches found
No related tags found
No related merge requests found
Edit postgresql-7.0RC5/src/Makefile.global.in. Change PG_KRB_SRVTAB to
somewhere useful for you, and PG_KRB_SRVNAM to whatever you want your
postgres kerberos service called.
make and install PostgreSQL.
Generate the keytab (PG_KRB_SRVTAB): kadmin% ank -randkey
postgres/server.my.domain.org kadmin% ktadd -k krb5.keytab
postgres/server.my.domain.org
Make sure the keytab is read-only to the postgres user. Make sure your
client binaries can see the new libraries.
edit pg_hba.conf and change the authentication method to krb5.
Everything should then work. If you use mod_auth_krb and mod_perl on
your web server, you can use AuthType KerberosV5SaveCredentials with a
mod_perl script. This gives secure database access over the web. No
extra passwords required.
Mike Wyer <mw@doc.ic.ac.uk>
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment