I'm trying to set Windows authentication for a postgres server.
The process is not well documented and makes the whole thing, obscure.
I found this doc but it is quite unclear.
In the necessary steps, the doc says that you need to create a domain user. Yet in the screenshot, it says
Once, you've created the domain user and that you set your postgres service with the domain user, you need to create a Service Principle Name to your service account with the following command line in the AD server
setspn -S POSTGRES/[fully.qualified.domain.name] DOMAIN\[service_account_name]
Questions are the following
- If my first question is correct, that I create a user called
SuperPostgres, I set the service as mentioned in the doc with the user
SuperPostgres, that I create a SPN with the command line
spnand set the relevant role as mentionned in the doc, is it certain that Postgres will allow an AD user like
AndyKwto connect to the postgres db?