Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1uJDWR-000vda-Gj for pgsql-bugs@arkaria.postgresql.org; Sun, 25 May 2025 15:44:23 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1uJDWP-000COR-Ia for pgsql-bugs@arkaria.postgresql.org; Sun, 25 May 2025 15:44:21 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1uJDWP-000COJ-A9 for pgsql-bugs@lists.postgresql.org; Sun, 25 May 2025 15:44:20 +0000 Received: from sss.pgh.pa.us ([68.162.161.243]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1uJDWL-0002mk-2y for pgsql-bugs@lists.postgresql.org; Sun, 25 May 2025 15:44:20 +0000 Received: from sss1.sss.pgh.pa.us (localhost [127.0.0.1]) by sss.pgh.pa.us (8.15.2/8.15.2) with ESMTP id 54PFiA833288374; Sun, 25 May 2025 11:44:11 -0400 From: Tom Lane To: Chris Gooch cc: Jacob Champion , "pgsql-bugs@lists.postgresql.org" Subject: Re: [EXT] Re: GSS Auth issue when user member of lots of AD groups In-reply-to: References: <1529314.1747928806@sss.pgh.pa.us> <1536692.1747933034@sss.pgh.pa.us> <1647590.1747936713@sss.pgh.pa.us> <3060113.1748096813@sss.pgh.pa.us> <3125813.1748115425@sss.pgh.pa.us> <3125964.1748115528@sss.pgh.pa.us> Comments: In-reply-to Chris Gooch message dated "Sun, 25 May 2025 07:52:49 -0000" MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <3288372.1748187850.1@sss.pgh.pa.us> Content-Transfer-Encoding: quoted-printable Date: Sun, 25 May 2025 11:44:10 -0400 Message-ID: <3288373.1748187850@sss.pgh.pa.us> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk Chris Gooch writes: > Thanks Tom. More than happy to give these patches a test as I can easily= reproduce the bug. Great! > Are there specific test cases you would like me to try? Obviously, check if it works for the user with lots of AD groups. But beyond that, just check it in everyday use. All I've done is to run our "kerberos" regression test, and I don't have a huge amount of faith in the coverage of that. regards, tom lane