Skip to content

Support Kerberos/GSSAPI authentication for PostgresQL #4489

Open

Description

@2ndDerivative

I have found these related issues/pull requests

Relates to #4308

Description

PostgreSQL supports GSSAPI authentication. It would be lovely if that were supported.

Prefered solution

Integrating cross-krb5 or a pluggable/trait interface for writing an own GSSAPI provider. I have a crate, "kenobi" that I have already integrated into sqlx at work for this, but I understand if nobody wants to integrate such a niche crate as a direct dependency, so I'd just write a trait interface that can use both.

Is this a breaking change? Why or why not?

It would not be, even though it would meaningfully increase the API surface

Activity

  1. 2ndDerivative commented on Nov 3, 2026

    @2ndDerivative
    ContributorAuthor

    Would a trait interface for Kerberos providers be okay or too much to maintain right away? It would abstract away all the cross-krb5 calls in the PR to a trait interface so one could support an own Kerberos backend.

    That would have to be exposed in sqlx-core or sqlx-postgres though

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions