Re: [PoC] Federated Authn/z with OAUTHBEARER - Mailing list pgsql-hackers

On Tue, Nov 5, 2024 at 3:33 PM Jacob Champion
<jacob.champion@enterprisedb.com> wrote:
> Done in v36, attached.

Forgot to draw attention to this part:

>     +# XXX libcurl must link after libgssapi_krb5 on FreeBSD to avoid segfaults
>     +# during gss_acquire_cred(). This is possibly related to Curl's Heimdal
>     +# dependency on that platform?

Best I can tell, libpq for FreeBSD has a dependency diamond for GSS
symbols: libpq links against MIT krb5, libcurl links against Heimdal,
libpq links against libcurl. Link order becomes critical to avoid
nasty segfaults, but I have not dug deeply into the root cause.

--Jacob