Support for GSSAPI authentication with PostgreSQL server
Summary
Currently, GitLab connects to the database server using username and password. This proposal is for adding support for GSSAPI protocol to authenticate with PostgreSQL server instead of username and password.
[The] mechanism is supported and quite easy to use, however in GitLab provided gitlab-psql distribution it is disabled:
gssencmode
. So the answer is I guess is to use official distribution with compiled GSSAPI mode. This is the server side to support that authentication method.
Proposal
This was proposed by one of our largest premium customers:
SFDC: 0016100000KvaZZAAZ
Plan: GitLab Premium
Seats: 2100
References
PostgreSQL documentation: https://www.postgresql.org/docs/16/gssapi-auth.html.
ZD ticket: https://gitlab.zendesk.com/agent/tickets/488153 (internal use only).