Re: krb5 & multiple users - Mailing list pgsql-interfaces

From Tom Lane
Subject Re: krb5 & multiple users
Date
Msg-id 23103.1021910501@sss.pgh.pa.us
Whole thread Raw
In response to Re: krb5 & multiple users  (Ed Schaller <schallee+postgres@darkmist.net>)
Responses Re: krb5 & multiple users  (Ed Schaller <schallee@darkmist.net>)
List pgsql-interfaces
Ed Schaller <schallee+postgres@darkmist.net> writes:
> The problems that I am running into is that conn is not available in
> the functions it needs to be in. For example, fe_getauthname would need
> the conn, but it is not available there, nor is it in conninfo_parse
> where it is called from. We can pass the conn in for most of these, but
> PQconndefaults doesn't have a conn at all and it calls conninfo_parse.

Hmm.  Can we rearrange things so that fe_getauthname is not called till
later?  I fail to see why it'd be a good idea to be sucking any kerberos
info in at all during PQconndefaults, so the above suggests to me that
we've divided up the operations wrongly.

BTW you might want to get Bear Giles involved in this, as he seems to be
thinking hard about authentication issues in libpq.
        regards, tom lane


pgsql-interfaces by date:

Previous
From: Ed Schaller
Date:
Subject: Re: krb5 & multiple users
Next
From: "Corey W. Gibbs"
Date:
Subject: Is there a limit on what can be returned?