Re: [HACKERS] Kerberos brokenness and oops question in 8.1beta2 - Mailing list pgsql-patches

From Bruce Momjian
Subject Re: [HACKERS] Kerberos brokenness and oops question in 8.1beta2
Date
Msg-id 200510131704.j9DH4Y411382@candle.pha.pa.us
Whole thread Raw
In response to Re: [HACKERS] Kerberos brokenness and oops question in 8.1beta2  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-patches
I need a comment on this.

---------------------------------------------------------------------------

Tom Lane wrote:
> BTW, it appears to me that this patch has also broken the claim in the
> manual that
>
>     If [krb_server_hostname is] not set, the default is to allow any
>     service principal matching an entry in the keytab.
>
> The reason that was true was that we passed a NULL "server" value to
> krb5_recvauth(), which with this patch we never do anymore.
>
> I'm not sure if this represents a serious loss of flexibility or not,
> but in any case the documentation needs an update.
>
>             regards, tom lane
>
> ---------------------------(end of broadcast)---------------------------
> TIP 5: don't forget to increase your free space map settings
>

--
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman@candle.pha.pa.us               |  (610) 359-1001
  +  If your life is a hard drive,     |  13 Roberts Road
  +  Christ can be your backup.        |  Newtown Square, Pennsylvania 19073

pgsql-patches by date:

Previous
From: Bruce Momjian
Date:
Subject: Re: [HACKERS] Kerberos brokenness and oops question in 8.1beta2
Next
From: Bruce Momjian
Date:
Subject: Re: Patch for PLPYTHONU - adding TD["relname"]