Improve the Kerberos Documentation. Fixes #6746

This commit is contained in:
Khushboo Vashi 2022-04-18 10:03:30 +05:30 committed by Akshay Joshi
parent 131ff4de48
commit 74e3f976c1
2 changed files with 16 additions and 7 deletions

View File

@ -4,10 +4,18 @@
`Enabling Kerberos Authentication`:index:
*****************************************
**Prerequisite:** Kerberos understanding and setup
Reference: https://web.mit.edu/kerberos/
To configure Kerberos authentication, you must setup your Kerberos Server and
generate a ticket on the client using *kinit*. To enable Kerberos authentication
for pgAdmin, you must configure the Kerberos settings in *config_local.py* or
*config_system.py* (see the :ref:`config.py <config_py>` documentation) on the
obtain a ticket on the client using *kinit*.
Note: Active Directory users with Kerberos support do not require kinit.
To enable Kerberos authentication for pgAdmin, you must configure the
Kerberos settings in *config_local.py* or *config_system.py*
(see the :ref:`config.py <config_py>` documentation) on the
system where pgAdmin is installed in Server mode. You can copy these settings
from *config.py* file and modify the values for the following parameters.
@ -38,10 +46,10 @@ from *config.py* file and modify the values for the following parameters.
Keytab file for HTTP Service
============================
* Generate the *Keytab* file for the HTTP service principal and copy it to the
*pgAdmin* webserver machine. Ensure that the operating system user owning
the *pgAdmin* webserver is the owner of this file and should be accessible
by that user.
* Generate the *Keytab* file for the HTTP service principal HTTP/<host-name>@realm,
and copy it to the *pgAdmin* webserver machine. Ensure that the operating system
user owning the *pgAdmin* webserver is the owner of this file and should be
accessible by that user.
* Please note that either you should set *default_keytab_name* parameter in
*krb5.conf* file or the environment variable *KRB5_KTNAME*. If not set then

View File

@ -18,6 +18,7 @@ Housekeeping
************
| `Issue #6131 <https://redmine.postgresql.org/issues/6131>`_ - Port query tool to React.
| `Issue #6746 <https://redmine.postgresql.org/issues/6746>`_ - Improve the Kerberos Documentation.
| `Issue #7255 <https://redmine.postgresql.org/issues/7255>`_ - Ensure the database and schema restriction controls are not shown as a drop-down.
Bug fixes