Increase limit on max length of the password( pg versions < 14) - Mailing list pgsql-hackers

From mahendrakar s
Subject Increase limit on max length of the password( pg versions < 14)
Date
Msg-id CABkiuWpN16CT-j81AdzV63zwR8nX3EAeV1rU2nsNiU9+7oLEkQ@mail.gmail.com
Whole thread Raw
Responses Re: Increase limit on max length of the password( pg versions < 14)
Re: Increase limit on max length of the password( pg versions < 14)
List pgsql-hackers
Hi hackers,

We have encountered an issue (invalid message length) when the
password length is > 1000 in pg 11,12,13 versions. This is due to the
limit(1000) on the max length of the password. In this case the
password is an access token(JWT) which can have varied  lengths >
1000. I see that this is already handled for GSS and SSPI
authentication tokens where the maximum accepted size is 65535.

This is not the case with pg versions >=14 as the limit on max length
is 65535(this change was added as part of sanity checks[1]).

So we have two options:
1. Backport patch[1] to 11,12,13
2. Change ONLY the limit on the max length of the password(my patch attached).

Please let me know your thoughts.

Thanks,
Mahendrakar.

[1]: https://www.postgresql.org/message-id/flat/2003757.1619373089%40sss.pgh.pa.us

Attachment

pgsql-hackers by date:

Previous
From: Amit Langote
Date:
Subject: Re: remaining sql/json patches
Next
From: Amit Kapila
Date:
Subject: Re: doc: improve the restriction description of using indexes on REPLICA IDENTITY FULL table.