В Срд, 11/01/2012 в 18:36 +0800, Denis Feklushkin пишет: > В Срд, 11/01/2012 в 17:06 +0700, Ivan Shmakov пишет: > > >>>>> Denis Feklushkin <denis.feklush...@gmail.com> writes: > > >>>>> В Срд, 11/01/2012 в 13:44 +0700, Ivan Shmakov пишет: > > >>>>> Denis Feklushkin <denis.feklush...@gmail.com> writes: > > > > […] > > > > >>> Libpq often used for connect to the database without human assist. > > >>> In this case there is no opportunity to enter a password and get a > > >>> ticket for authentication in Kerberos. > > > > >>> Please add the ability to specify in a function > > >>> PQconnectdb(conninfo) path to the Kerberos 5 keytab file. > > > > >> Shouldn't libpq just assume whatever identity confirmed by the prior > > >> kinit(1) invocation when using Kerberos for authentication? > > > > > In general, ability to use a different keytab files would add some > > > flexibility - libpq will be able to connect to the different servers > > > in different realms at same time. (I wanted it in 2009, as far as I > > > can remember) > > > > Please note that it's possible to store keys for multiple > > Kerberos identities in a single keytab file. > > Of course. > > > > > Also, it's possible to make Kerberos KDC's for different realms > > trust each other. Then, the client having an identity within, > > say, the EXAMPLE.ORG realm could authenticate to the server > > within, say, EXAMPLE.COM. > > > > Suppose I am the developer of databases on different servers in > different realms.
fix: with different usernames, not different realms > How do I connect to them at the same time? -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
