prisma-engines icon indicating copy to clipboard operation
prisma-engines copied to clipboard

feat(quaint): enable integrated-auth-gssapi tiberius feature

Open andrew-dias opened this issue 1 year ago • 4 comments

This PR should extend support for MSSQL integrated authentication to *nix systems. Prisma currently only supports this feature on Windows.

The Tiberius SQL Server driver used by Prisma can support integrated authentication on *nix by enabling its integrated-auth-gssapi feature (see https://github.com/prisma/tiberius#integrated-authentication-trustedconnection-on-nix).

Closes #4974.

andrew-dias avatar Aug 14 '24 21:08 andrew-dias

CLA assistant check
All committers have signed the CLA.

CLAassistant avatar Aug 14 '24 21:08 CLAassistant

Won't this make Prisma depend on additional shared libraries to be installed on the system? If so, it's a breaking change.

aqrln avatar Aug 24 '24 10:08 aqrln

Won't this make Prisma depend on additional shared libraries to be installed on the system? If so, it's a breaking change.

Yes, according to https://github.com/prisma/tiberius#integrated-authentication-trustedconnection-on-nix, on *nix:

With the integrated-auth-gssapi feature enabled, the crate requires the GSSAPI/Kerberos libraries/headers installed

I am hoping that is only required if the the user actually uses the integrated auth feature on a *nix machine, otherwise this whole thing is probably a no-go. If that is true, then I don't think it should be considered a breaking change. Unfortunately this is my first foray into Rust and Prisma so I don't know how all the pieces fit together during runtime yet.

andrew-dias avatar Aug 27 '24 04:08 andrew-dias

@aqrln It looks like @pimeys was spending some time looking into the implications of enabling this gssapi feature on Prisma a while ago (https://github.com/estokes/libgssapi/issues/1#issuecomment-682488405). I would be curious to know where he or the Prisma org ended up on this.

andrew-dias avatar Sep 06 '24 19:09 andrew-dias

Thanks for the PR. Unfortunately, I have to close it as the original issues was closed as well by this comment.

jkomyno avatar Jan 17 '25 13:01 jkomyno