Date: Thu, 13 Apr 2023 09:01:20 -0400
From: Stephen Frost <sfrost@snowman.net>
To: buildfarm-members@postgresql.org
Subject: Re: --with-gssapi requiring MIT Kerberos
Message-ID: <ZDf9IOBrAKsxV5Y7@tamriel.snowman.net>
References: <ZDbZ8wYVa9qhAafn@tamriel.snowman.net>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="Vlk1vbRVCT0jD8uM"
Content-Disposition: inline
In-Reply-To: <ZDbZ8wYVa9qhAafn@tamriel.snowman.net>
User-Agent: Mutt/2.1.4 (2021-12-11)
Archived-At: 
 <https://www.postgresql.org/message-id/ZDf9IOBrAKsxV5Y7%40tamriel.snowman.net>
Precedence: bulk


--Vlk1vbRVCT0jD8uM
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Greetings buildfarm-members,

* Stephen Frost (sfrost@snowman.net) wrote:
> While it hasn't gone in quite yet, the plan is to start requiring MIT
> Kerberos with the Kerberos credential delegation support.  I anticipate
> committing that later today or perhaps tomorrow.

This change has now been committed.

> What this means for buildfarm members is that if you currently have
> --with-gssapi enabled, you'll need to make sure that you have MIT
> Kerberos installed.  This is generally available as 'krb5' on most
> platforms (libkrb5-dev on Ubuntu/Debian is the development package, on
> FreeBSD it's the krb5 package, for example).
>=20
> Additionally, if your buildfarm system has the resources for it and the
> localhost network is secure, it'd be great if you would consider
> enabling the Kerberos tests in PG_TEST_EXTRA.  This requires having the
> MIT KDC and Kerberos client packages installed also, but we are then
> able to actually do a full test of the Kerberos system.

Any questions, please feel free to ask.

Thanks!

Stephen

--Vlk1vbRVCT0jD8uM
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=1srw
-----END PGP SIGNATURE-----

--Vlk1vbRVCT0jD8uM--