Re: BUG #13854: SSPI authentication failure: wrong realm name used - Mailing list pgsql-bugs

From Tom Lane
Subject Re: BUG #13854: SSPI authentication failure: wrong realm name used
Date
Msg-id 25002.1452214401@sss.pgh.pa.us
Whole thread Raw
In response to BUG #13854: SSPI authentication failure: wrong realm name used  (chris@chrullrich.net)
Responses Re: BUG #13854: SSPI authentication failure: wrong realm name used
List pgsql-bugs
chris@chrullrich.net writes:
> According to the release notes, the default for the "include_realm" option
> in SSPI authentication was changed from off to on in 9.5 for improved
> security. However, the authenticated user name, with the option enabled, now
> includes the NetBIOS domain name, *not* the Kerberos realm name:

Is this new breakage, or did include_realm=1 fail in the same way for
your configuration in prior releases?

            regards, tom lane

pgsql-bugs by date:

Previous
From: chris@chrullrich.net
Date:
Subject: BUG #13854: SSPI authentication failure: wrong realm name used
Next
From: Christian Ullrich
Date:
Subject: Re: BUG #13854: SSPI authentication failure: wrong realm name used