MIME-Version: 1.0
References: <0b8f60d0-c1f5-4e1e-bb31-82e9e41640e6@arvin.dk>
 <CAFOhELfsrNqee=UNx2WzyRio=a=5b8=nrMNwfOoqmOYguXG9ww@mail.gmail.com>
 <e5d0d541-7daa-43da-95d1-db0942317107@arvin.dk>
In-Reply-To: <e5d0d541-7daa-43da-95d1-db0942317107@arvin.dk>
From: Dave Page <dpage@pgadmin.org>
Date: Wed, 22 Jan 2025 09:22:36 +0000
Message-ID: 
 <CA+OCxoxJ8eiN2jaxBfnYyAoLbOi_+s_Q6USt6Eah==oS2AYbgQ@mail.gmail.com>
Subject: Re: gssenc supported?
To: Troels Arvin <troels@arvin.dk>
Cc: pgadmin-support@lists.postgresql.org
Content-Type: multipart/alternative; boundary="0000000000006da62f062c480924"
Archived-At: 
 <https://www.postgresql.org/message-id/CA%2BOCxoxJ8eiN2jaxBfnYyAoLbOi_%2Bs_Q6USt6Eah%3D%3DoS2AYbgQ%40mail.gmail.com>
Precedence: bulk

--0000000000006da62f062c480924
Content-Type: text/plain; charset="UTF-8"

Hi

On Tue, 21 Jan 2025 at 16:51, Troels Arvin <troels@arvin.dk> wrote:

> Hello,
>
> Khushboo Vashi wrote:
> >   Have you tried connecting Postgres Server with PSQL?
>
> Yes, I've tried the psql.exe which is shippe with pgadmin. And I've
> tried psql.exe from the latest Windows installer from
> https://www.enterprisedb.com/downloads/postgres-postgresql-downloads
>
> Both work when having hostnogssenc in pg_hba.conf. But both do not work
> when hostgssenc is used in pg_hba.conf.
>
> Does someone know why those binaries are not compiled with support for
> hostgssenc?
>

We don't build the binaries that we ship with pgAdmin on Windows with
GSSAPI support, for a couple of reasons. First, there's actually a
long-standing bug [1]  in PostgreSQL that prevents compilation on Windows
with both MIT Kerberos and OpenSSL together (I've tried multiple
backchannels to get that fix committed - please feel free to chime in on
the thread). Secondly, people almost exclusively use SSPI on Windows. You
are actually the first person I recall ever wanting GSSAPI support.

FWIW, we ship MIT Kerberos anyway (for handling app logins). Adding GSSAPI
support would be trivial, if the upstream bug were fixed.

[1]
https://www.postgresql.org/message-id/flat/CA%2BOCxoxwsgi8QdzN8A0OPGuGfu_1vEW3ufVBnbwd3gfawVpsXw%40mail.gmail.com

-- 
Dave Page
pgAdmin: https://www.pgadmin.org
PostgreSQL: https://www.postgresql.org
pgEdge: https://www.pgedge.com

--0000000000006da62f062c480924
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><div>Hi</div><br><div class=3D"gmail_quot=
e"><div dir=3D"ltr" class=3D"gmail_attr">On Tue, 21 Jan 2025 at 16:51, Troe=
ls Arvin &lt;<a href=3D"mailto:troels@arvin.dk" target=3D"_blank">troels@ar=
vin.dk</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"m=
argin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;borde=
r-left-color:rgb(204,204,204);padding-left:1ex">Hello,<br>
<br>
Khushboo Vashi wrote:<br>
&gt; =C2=A0 Have you tried connecting Postgres Server with PSQL?<br>
<br>
Yes, I&#39;ve tried the psql.exe which is shippe with pgadmin. And I&#39;ve=
 <br>
tried psql.exe from the latest Windows installer from <br>
<a href=3D"https://www.enterprisedb.com/downloads/postgres-postgresql-downl=
oads" rel=3D"noreferrer" target=3D"_blank">https://www.enterprisedb.com/dow=
nloads/postgres-postgresql-downloads</a><br>
<br>
Both work when having hostnogssenc in pg_hba.conf. But both do not work <br=
>
when hostgssenc is used in pg_hba.conf.<br>
<br>
Does someone know why those binaries are not compiled with support for <br>
hostgssenc?<br></blockquote><div><br></div><div>We don&#39;t build the bina=
ries that we ship with pgAdmin on Windows with GSSAPI support, for a couple=
 of reasons. First, there&#39;s actually a long-standing bug [1] =C2=A0in P=
ostgreSQL that prevents compilation on Windows with both MIT Kerberos and O=
penSSL together (I&#39;ve tried multiple backchannels to get that fix commi=
tted - please feel free to chime in on the thread). Secondly, people almost=
 exclusively use SSPI on Windows. You are actually the first person I recal=
l ever wanting GSSAPI support.</div><div><br></div><div>FWIW, we ship MIT K=
erberos anyway (for handling app logins). Adding GSSAPI support would be tr=
ivial, if the upstream bug were fixed.</div><div><br></div><div>[1]=C2=A0<a=
 href=3D"https://www.postgresql.org/message-id/flat/CA%2BOCxoxwsgi8QdzN8A0O=
PGuGfu_1vEW3ufVBnbwd3gfawVpsXw%40mail.gmail.com" target=3D"_blank">https://=
www.postgresql.org/message-id/flat/CA%2BOCxoxwsgi8QdzN8A0OPGuGfu_1vEW3ufVBn=
bwd3gfawVpsXw%40mail.gmail.com</a></div></div><div><br></div><span class=3D=
"gmail_signature_prefix">-- </span><br><div dir=3D"ltr" class=3D"gmail_sign=
ature"><div dir=3D"ltr">Dave Page<div>pgAdmin: <a href=3D"https://www.pgadm=
in.org" target=3D"_blank">https://www.pgadmin.org</a></div><div>PostgreSQL:=
 <a href=3D"https://www.postgresql.org" target=3D"_blank">https://www.postg=
resql.org</a></div><div>pgEdge: <a href=3D"https://www.pgedge.com" target=
=3D"_blank">https://www.pgedge.com</a><br><div></div><div><br></div></div><=
/div></div></div>
</div>

--0000000000006da62f062c480924--