Date: Wed, 12 Apr 2023 12:18:59 -0400
From: Stephen Frost <sfrost@snowman.net>
To: buildfarm-members@postgresql.org
Subject: --with-gssapi requiring MIT Kerberos
Message-ID: <ZDbZ8wYVa9qhAafn@tamriel.snowman.net>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="tVHSSYrK37WHdbU4"
Content-Disposition: inline
User-Agent: Mutt/2.1.4 (2021-12-11)
Archived-At: 
 <https://www.postgresql.org/message-id/ZDbZ8wYVa9qhAafn%40tamriel.snowman.net>
Precedence: bulk


--tVHSSYrK37WHdbU4
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

Greetings buildfarm-members,

While it hasn't gone in quite yet, the plan is to start requiring MIT
Kerberos with the Kerberos credential delegation support.  I anticipate
committing that later today or perhaps tomorrow.

What this means for buildfarm members is that if you currently have
--with-gssapi enabled, you'll need to make sure that you have MIT
Kerberos installed.  This is generally available as 'krb5' on most
platforms (libkrb5-dev on Ubuntu/Debian is the development package, on
FreeBSD it's the krb5 package, for example).

Additionally, if your buildfarm system has the resources for it and the
localhost network is secure, it'd be great if you would consider
enabling the Kerberos tests in PG_TEST_EXTRA.  This requires having the
MIT KDC and Kerberos client packages installed also, but we are then
able to actually do a full test of the Kerberos system.

Any questions, please feel free to ask.

Thanks!

Stephen

--tVHSSYrK37WHdbU4
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=/UMS
-----END PGP SIGNATURE-----

--tVHSSYrK37WHdbU4--