From: jian xu <jamesxu@outlook.com>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: pgsql-admin <pgsql-admin@postgresql.org>
Subject: Re: pg13 psql can't connect pg instance with ssl enabled after upgrading
Date: Fri, 12 Feb 2021 23:40:19 +0000
Message-ID: <DM6PR02MB4572889A58404358C7ADD1CBA18B9@DM6PR02MB4572.namprd02.prod.outlook.com> (raw)
In-Reply-To: <1611195.1613170786@sss.pgh.pa.us>
References: <BL0PR02MB456168A5C9909C71C578CFFDA18B9@BL0PR02MB4561.namprd02.prod.outlook.com>
<1608034.1613166623@sss.pgh.pa.us>
<BL0PR02MB45612EA590D8ACB9A14A0E7BA18B9@BL0PR02MB4561.namprd02.prod.outlook.com>
<1611195.1613170786@sss.pgh.pa.us>
thanks Tom, may I know if there is a way to disable GSS encryption? and only use ssl encryption?
not sure why it worked on pg11, but not on pg13....
does it mean if we use GSS, we are not able to use ssl encryption on pg13?
thanks,
James
________________________________
From: Tom Lane <tgl@sss.pgh.pa.us>
Sent: Friday, February 12, 2021 17:59
To: jian xu <jamesxu@outlook.com>
Cc: pgsql-admin <pgsql-admin@postgresql.org>
Subject: Re: pg13 psql can't connect pg instance with ssl enabled after upgrading
jian xu <jamesxu@outlook.com> writes:
> Thanks Tom. you are right, we are using GSS authentication. and psql version is 13.1
> postgresql_13_1/bin/psql --version
> psql (PostgreSQL) 13.1
Ah. Then perhaps you want hostgssenc not hostssl in your pg_hba
entries. But I'd definitely recommend an update to 13.2, as it
fixes a number of GSS bugs besides this one.
regards, tom lane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: jamesxu@outlook.com, tgl@sss.pgh.pa.us
Subject: Re: pg13 psql can't connect pg instance with ssl enabled after upgrading
In-Reply-To: <DM6PR02MB4572889A58404358C7ADD1CBA18B9@DM6PR02MB4572.namprd02.prod.outlook.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox