Re: [PATCH v20] GSSAPI encryption support - Mailing list pgsql-hackers

From Peter Eisentraut
Subject Re: [PATCH v20] GSSAPI encryption support
Date
Msg-id 7d0584ab-26a8-6731-aeee-9c8e195533e6@2ndquadrant.com
Whole thread Raw
In response to Re: [PATCH v20] GSSAPI encryption support  (Stephen Frost <sfrost@snowman.net>)
Responses Re: [PATCH v20] GSSAPI encryption support  (Stephen Frost <sfrost@snowman.net>)
List pgsql-hackers
On 2019-04-05 04:59, Stephen Frost wrote:
> Alright, that over-size error was a bug in the error-handling code,
> which I've just pushed a fix for.  That said...

Yes, that looks better now.

> This looks like it's a real issue and it's unclear what's going on here.
> I wonder- are you certain that you're using all the same Kerberos
> libraries for the KDC, the server, and psql?

Right, it was built against the OS-provided Kerberos installation
(/usr/bin etc.).  If I build against the Homebrew-provided one then the
tests pass.

So maybe that means that this encryption feature is not supported on
that (presumably older) installation?  (krb5-config --version says
"Kerberos 5 release 1.7-prerelease")  Is that plausible?  Is a gentler
failure mode possible?

-- 
Peter Eisentraut              http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services



pgsql-hackers by date:

Previous
From: Michael Banck
Date:
Subject: Re: pg_rewind vs superuser
Next
From: Michael Paquier
Date:
Subject: Re: pg_rewind vs superuser