Re: couple socket-connection questions

[Daniel Kouril <kouril@ics.muni.cz>]

On Thu, May 29, 2003 at 05:48:44PM -0700, Henry B. Hotz wrote:
> Actually that's mod_auth_krb, not kerb.  They are different apache 
> modules and the one without the 'e' is newer.  I found out about it 
> from the PostgreSQL manual.  It claims to implement some Microsoft 
> IETF-draft which is also supported by Mozilla for getting Kerberos 
> credentials forwarded.  If the connection doesn't support the 
> IETF-draft then it falls back to getting a name/password via basic 
> auth.  With the right options apache will retain the (forwarded or 
> created) tgt which can be used by mod_perl (or presumably PHP) to 
> authenticate a connection with PostgreSQL.

I don't know which module is meant by the PostgreSQL docs, but you can have
a look at http://meta.cesnet.cz/software/heimdal/negotiate.en.html
The page contains implementations of exact the functionality refered above.

--
Dan