Re: [Patch] Using Windows groups for SSPI authentication

2020-10-16 Thread Stephen Frost
Greetings, * Russell Foster (russell.foster.cod...@gmail.com) wrote: > On Thu, Oct 15, 2020 at 11:31 AM Stephen Frost wrote: > > > Please don't top-post on these lists.. > Didn't even know what that was, had to look it up. Hopefully it is > resolved. Gmail does too many things for you! Indeed!

Re: [Patch] Using Windows groups for SSPI authentication

2020-10-15 Thread Russell Foster
On Thu, Oct 15, 2020 at 11:31 AM Stephen Frost wrote: > Please don't top-post on these lists.. Didn't even know what that was, had to look it up. Hopefully it is resolved. Gmail does too many things for you! > While not exactly the same, of course, they are more-or-less equivilant > to Unix grou

Re: [Patch] Using Windows groups for SSPI authentication

2020-10-15 Thread Stephen Frost
Greetings, * Russell Foster (russell.foster.cod...@gmail.com) wrote: > Right after I sent that I realized that sspi-group was a bad idea, not sure > if that's even a thing. Tried to cancel as it was still in moderation, but > it made it through anyways! You are right, it is very windows specific.

Re: [Patch] Using Windows groups for SSPI authentication

2020-10-14 Thread Russell Foster
Right after I sent that I realized that sspi-group was a bad idea, not sure if that's even a thing. Tried to cancel as it was still in moderation, but it made it through anyways! You are right, it is very windows specific. I can make it windows-group as you said, and resubmit. On Tue, Oct 13, 2020

Re: [Patch] Using Windows groups for SSPI authentication

2020-10-13 Thread Russell Foster
Going to take a guess at what you mean by: I do object to using syntax that makes random assumptions about what a user name can or can't be. Are you referring to the "+" syntax in the ident file? I chose that because somewhere else (hba?) using the same syntax for groups. The quotes are just ther

Re: [Patch] Using Windows groups for SSPI authentication

2020-10-13 Thread Tom Lane
Russell Foster writes: > I understand your concerns overall, and the solution you propose seems > reasonable. But are we just using "windows-group" because the code is not > there today to check for a user in another OS group? It's not clear to me whether Windows groups have exact equivalents in

Re: [Patch] Using Windows groups for SSPI authentication

2020-10-13 Thread Tom Lane
Russell Foster writes: > Going to take a guess at what you mean by: >> I do object to using syntax that makes random assumptions about what a >> user name can or can't be. > Are you referring to the "+" syntax in the ident file? I chose that because > somewhere else (hba?) using the same syntax f

Re: [Patch] Using Windows groups for SSPI authentication

2020-10-13 Thread Tom Lane
Russell Foster writes: > I have some code that I've been using that supports adding and > authenticating Windows groups via the pg_ident file. This is useful for > sysadmins as it lets them control database access outside the database > using Windows groups. It has a new > indicator (+), that sign

[Patch] Using Windows groups for SSPI authentication

2020-10-13 Thread Russell Foster
I have some code that I've been using that supports adding and authenticating Windows groups via the pg_ident file. This is useful for sysadmins as it lets them control database access outside the database using Windows groups. It has a new indicator (+), that signifies the identifier is a Windows