pgsql: For Kerberos testing, disable reverse DNS lookup - Mailing list pgsql-committers

From Stephen Frost
Subject pgsql: For Kerberos testing, disable reverse DNS lookup
Date
Msg-id E1pkveT-001wGf-Qm@gemulon.postgresql.org
Whole thread Raw
List pgsql-committers
For Kerberos testing, disable reverse DNS lookup

In our Kerberos test suite, there isn't much need to worry about the
normal canonicalization that Kerberos provides by looking up the reverse
DNS for the IP address connected to, and in some cases it can actively
cause problems (eg: a captive portal wifi where the normally not
resolvable localhost address used ends up being resolved anyway, and
not to the domain we are using for testing, causing the entire
regression test to fail with errors about not being able to get a TGT
for the remote realm for cross-realm trust).

Therefore, disable it by adding rdns = false into the krb5.conf that's
generated for the test.

Reviewed-By: Heikki Linnakangas
Discussion: https://postgr.es/m/Y/QD2zDkDYQA1GQt@tamriel.snowman.net

Branch
------
REL_15_STABLE

Details
-------
https://git.postgresql.org/pg/commitdiff/0787432f33fbbda4f628f4499468a3f7d0bc11ad

Modified Files
--------------
src/test/kerberos/t/001_auth.pl | 12 ++++++++++++
1 file changed, 12 insertions(+)


pgsql-committers by date:

Previous
From: Peter Geoghegan
Date:
Subject: pgsql: Show more detail in heapam rmgr descriptions.
Next
From: Peter Geoghegan
Date:
Subject: pgsql: Show more detail in nbtree rmgr descriptions.