Nice article sir, so basically you need three servers if you are using kerberos us you authentication mechinisim ? I will try it out on my test servers and see if it works for me. Can all this be done on only one server instead of three servers ?
Hi Benson. Thanks for posting this video. I have a question about how the user is being authenticated via psql? Is it just verifying whether the role is available in the db? How is the postgres principle that you created is helping here?
The user must be available in the KDC database and also in Postgres. this user must have gone through the authentication process in kdc and finally obtain the service ticket which will need to be validated in PostgreSQL since we have the keytab file in the postgresql.conf. Let me know if you need further explanation as there are a lot of pieces with Kerberos authentication
@@bensonyerimah2224 , Thanks for the explanation. Now I understand how an individual user is authenticated via KDC. I will try to setup my own test environment and play around with it. Keep up your good work. :) Cheers!
Hi Benson, really great explanation and compilation of all the components. It's a great help. 👍
Nice article sir, so basically you need three servers if you are using kerberos us you authentication mechinisim ? I will try it out on my test servers and see if it works for me. Can all this be done on only one server instead of three servers ?
Hi Benson. Thanks for posting this video. I have a question about how the user is being authenticated via psql?
Is it just verifying whether the role is available in the db? How is the postgres principle that you created is helping here?
The user must be available in the KDC database and also in Postgres. this user must have gone through the authentication process in kdc and finally obtain the service ticket which will need to be validated in PostgreSQL since we have the keytab file in the postgresql.conf. Let me know if you need further explanation as there are a lot of pieces with Kerberos authentication
@@bensonyerimah2224 , Thanks for the explanation. Now I understand how an individual user is authenticated via KDC. I will try to setup my own test environment and play around with it.
Keep up your good work. :) Cheers!