RE: [EXT] Re: GSS Auth issue when user member of lots of AD groups - Mailing list pgsql-bugs

From Chris Gooch
Subject RE: [EXT] Re: GSS Auth issue when user member of lots of AD groups
Date
Msg-id DS0PR22MB5971EA3C6AB2B800341826FCBE67A@DS0PR22MB5971.namprd22.prod.outlook.com
Whole thread Raw
In response to Re: [EXT] Re: GSS Auth issue when user member of lots of AD groups  (Jacob Champion <jacob.champion@enterprisedb.com>)
Responses Re: [EXT] Re: GSS Auth issue when user member of lots of AD groups
List pgsql-bugs
Would this patch be targeting next release cycle in August?

Thanks,
Chris

-----Original Message-----
From: Jacob Champion <jacob.champion@enterprisedb.com> 
Sent: Tuesday, May 27, 2025 11:25 PM
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Chris Gooch <cgooch@bamfunds.com>; pgsql-bugs@lists.postgresql.org
Subject: Re: [EXT] Re: GSS Auth issue when user member of lots of AD groups

On Tue, May 27, 2025 at 3:15 PM Tom Lane <tgl@sss.pgh.pa.us> wrote:
> I don't think so, because that would create exactly the cross-version 
> discrepancy we need to avoid.  (That is, if sender thinks it can do
> 16384 when receiver's limit is 16384-4, kaboom.)  The patch proposes 
> to allow slop in this during the auth phase when the packet size is 
> really being determined by the underlying GSSAPI library anyway.
> But once we're past that and our own code is slicing up the data 
> stream into packets, I think the max packet size is indeed an 
> inalterable part of the protocol.

Oh, I see. Yeah, that's unfortunate but makes sense.

> Could we address your confusion by improving the comment about the 
> packet-size #define to point out that it includes the header word?

Yes, I think so.

Thanks!
--Jacob

This email and any attachments should not be construed as an offer or recommendation to sell or buy or a solicitation
ofan offer to sell or buy any specific security, fund or instrument or to participate in any particular investment
strategy.The information contained herein is given as of a certain date and does not purport to give information as of
anyother date. Although the information presented herein has been obtained from sources we believe to be reliable, no
representationor warranty, expressed or implied, is made as to the accuracy or completeness of that information. Past
performanceis not indicative of future results. 

CONFIDENTIALITY NOTICE: This message and any attachment are confidential. If you are not the intended recipient, please
telephoneor email the sender and delete this message and any attachment from your system. If you are not the intended
recipientyou must not copy this message or attachment or disclose the contents to any other persons. 

Balyasny Asset Management (UK) LLP is authorised and regulated by the Financial Conduct Authority in the UK. Balyasny
AssetManagement LP is registered as an Investment Advisor with the Securities and Exchange Commission in the USA. 

BAM prohibits all personnel from having any business related communications over text message or other unapproved
communicationapplications. Unless pre-approved, BAM employees are only permitted to communicate over email, Bloomberg
andBAM telephone lines. 

pgsql-bugs by date:

Previous
From: Laurenz Albe
Date:
Subject: Re: SIMILAR TO expressions translate wildcards where they shouldn't
Next
From: Tom Lane
Date:
Subject: Re: [EXT] Re: GSS Auth issue when user member of lots of AD groups