Re: SSPI client authentication in non-Windows builds - Mailing list pgsql-hackers

From Magnus Hagander
Subject Re: SSPI client authentication in non-Windows builds
Date
Msg-id AANLkTin9-tOmk+cMgRKDcWh864YksuYvCBf8K8gmLj_=@mail.gmail.com
Whole thread Raw
In response to Re: SSPI client authentication in non-Windows builds  (Christian Ullrich <chris@chrullrich.net>)
Responses Re: SSPI client authentication in non-Windows builds  (Stephen Frost <sfrost@snowman.net>)
Re: SSPI client authentication in non-Windows builds  (Magnus Hagander <magnus@hagander.net>)
List pgsql-hackers
On Sat, Jan 29, 2011 at 16:21, Christian Ullrich <chris@chrullrich.net> wrote:
> * Magnus Hagander wrote:
>
>> However, i think the code path down around the error message is simply
>> incorrect. That #ifdef spaghetti is pretty hard to parse, but it gives
>> the wrong error message (we should say it's sspi that's not available
>> when we have none of the two options) and/or a "duplicate case label"
>> error, in some combinations of sspi/gssapi existing/notexisting.
>
>>
>>
>> Attached is an updated version of the patch that passes compiling on
>> all my systems in different combinations, including msvc. Can you
>> verify that it still works in your env? (you don't have to retest all
>> those platforms!)
>
> Yes, it works fine, for md5, sspi, and gss authentication methods, tested
> with MIT 1.4 against Windows 2008R2, PostgreSQL 8.4.4.

Great, thanks!


> For some reason, the 9.0.2 binary installer for Windows does not install the
> Kerberos/GSSAPI DLLs, so I cannot test with that version.

That's intentional - but they are not needed for SSPI operation on
windows, and in fact won't even be used by default if they're there.

They were taken out of the main packaging due to them being a PITA to
deal with in general, IIRC.

--
 Magnus Hagander
 Me: http://www.hagander.net/
 Work: http://www.redpill-linpro.com/


pgsql-hackers by date:

Previous
From: Christian Ullrich
Date:
Subject: Re: SSPI client authentication in non-Windows builds
Next
From: Stephen Frost
Date:
Subject: Re: SSPI client authentication in non-Windows builds