Re: BUG #13854: SSPI authentication failure: wrong realm name used - Mailing list pgsql-hackers

From Christian Ullrich
Subject Re: BUG #13854: SSPI authentication failure: wrong realm name used
Date
Msg-id n6u6n5$6fh$1@ger.gmane.org
Whole thread Raw
Responses Re: BUG #13854: SSPI authentication failure: wrong realm name used  (Christian Ullrich <chris@chrullrich.net>)
List pgsql-hackers
* Christian Ullrich wrote:

> * Christian Ullrich wrote:
>
> > According to the release notes, the default for the "include_realm"
> > option in SSPI authentication was changed from off to on in 9.5 for> > improved security. However, the
authenticateduser name, with the> > option enabled, includes the NetBIOS domain name, *not* the Kerberos
 
> > realm name:

> Below is a patch to correct this behavior. I suspect it has some
> serious compatibility issues, so I would appreciate feedback.

Updated patch, sorry. The first one worked by accident only.

-- 
Christian



pgsql-hackers by date:

Previous
From: Peter Eisentraut
Date:
Subject: Re: strange CREATE INDEX tab completion cases
Next
From: Tom Lane
Date:
Subject: Why doesn't src/backend/port/win32/socket.c implement bind()?