> > > > You can do this today using PAM authenication, but this is > > > not always > > > > possible. Notably it's never possible on Windows, and there are > > > > several unix platforms/distros that don't support it > > > without a lot of > > > > work. > > > > > > Or you port PAM to Windows, and then everybody wins. > > > > Well, for one that's going to be a *lot* more work. I'm not > even sure > > how many of the concepts would apply to win32, but then I > don't really > > know PAM... > > > > Most of the work has already been done: > > http://pgina.xpasystems.com/
Eh, no, that one works the other way around, adn doesn't help us at all. GINA for windows is about the same as PAM is for Unix. Allows pluggable authentication. But we don't support GINA authentication. I guess we could support GINA authentication instead of LDAP, which would add the benefit of supporting windows passwords (withotu single sign on) for local accounts. But it would also make the hurdle a whole lot larger for anybody wanting to do ldap auth for postgres - installilng a GINA changes *all* the authentication on windows. Which means you could use those accounts to log on to the system, which you probalby don't want... //Magnus ---------------------------(end of broadcast)--------------------------- TIP 6: explain analyze is your friend