Re: Kerberos delegation support in libpq and postgres_fdw - Mailing list pgsql-hackers

From Stephen Frost
Subject Re: Kerberos delegation support in libpq and postgres_fdw
Date
Msg-id 20220408122130.GD10577@tamriel.snowman.net
Whole thread Raw
In response to Re: Kerberos delegation support in libpq and postgres_fdw  (Stephen Frost <sfrost@snowman.net>)
Responses Re: Kerberos delegation support in libpq and postgres_fdw  (Robert Haas <robertmhaas@gmail.com>)
Re: Kerberos delegation support in libpq and postgres_fdw  (Jacob Champion <jchampion@timescale.com>)
List pgsql-hackers
Greetings,

* Stephen Frost (sfrost@snowman.net) wrote:
> The new krb_user_ccache is a lot closer to 'global', though it's
> specifically for user-authenticated backends (allowing the postmaster
> and other things like replication connections to use whatever the
> credential cache is set to by the administrator on startup), but that
> seems like it makes sense to me- generally you're not going to want
> regular user backends to be accessing the credential cache of the
> 'postgres' unix account on the server.

Added an explicit 'environment' option to allow for, basically, existing
behavior, where we don't mess with the environment variable at all,
though I kept the default as MEMORY since I don't think it's really
typical that folks actually want regular user backends to inherit the
credential cache of the server.

Added a few more tests and updated the documentation too.  Sadly, seems
we've missed the deadline for v15 though for lack of feedback on these.
Would really like to get some other folks commenting as these are new
pg_hba and postgresql.conf options being added.

Thanks!

Stephen

Attachment

pgsql-hackers by date:

Previous
From: David Rowley
Date:
Subject: Re: Add parameter jit_warn_above_fraction
Next
From: Magnus Hagander
Date:
Subject: Re: Add parameter jit_warn_above_fraction