Thread: --with-gssapi requiring MIT Kerberos

--with-gssapi requiring MIT Kerberos

From
Stephen Frost
Date:
Greetings buildfarm-members,

While it hasn't gone in quite yet, the plan is to start requiring MIT
Kerberos with the Kerberos credential delegation support.  I anticipate
committing that later today or perhaps tomorrow.

What this means for buildfarm members is that if you currently have
--with-gssapi enabled, you'll need to make sure that you have MIT
Kerberos installed.  This is generally available as 'krb5' on most
platforms (libkrb5-dev on Ubuntu/Debian is the development package, on
FreeBSD it's the krb5 package, for example).

Additionally, if your buildfarm system has the resources for it and the
localhost network is secure, it'd be great if you would consider
enabling the Kerberos tests in PG_TEST_EXTRA.  This requires having the
MIT KDC and Kerberos client packages installed also, but we are then
able to actually do a full test of the Kerberos system.

Any questions, please feel free to ask.

Thanks!

Stephen

Attachment

Re: --with-gssapi requiring MIT Kerberos

From
Stephen Frost
Date:
Greetings buildfarm-members,

* Stephen Frost (sfrost@snowman.net) wrote:
> While it hasn't gone in quite yet, the plan is to start requiring MIT
> Kerberos with the Kerberos credential delegation support.  I anticipate
> committing that later today or perhaps tomorrow.

This change has now been committed.

> What this means for buildfarm members is that if you currently have
> --with-gssapi enabled, you'll need to make sure that you have MIT
> Kerberos installed.  This is generally available as 'krb5' on most
> platforms (libkrb5-dev on Ubuntu/Debian is the development package, on
> FreeBSD it's the krb5 package, for example).
>
> Additionally, if your buildfarm system has the resources for it and the
> localhost network is secure, it'd be great if you would consider
> enabling the Kerberos tests in PG_TEST_EXTRA.  This requires having the
> MIT KDC and Kerberos client packages installed also, but we are then
> able to actually do a full test of the Kerberos system.

Any questions, please feel free to ask.

Thanks!

Stephen

Attachment