From: Tom Lane <tgl@sss.pgh.pa.us>
To: gopi.anbumech@gmail.com
Cc: pgsql-bugs@lists.postgresql.org
Subject: Re: BUG #17740: Connecting postgresql 13 with different psql versions
Date: Mon, 09 Jan 2023 10:19:25 -0500
Message-ID: <4092738.1673277565@sss.pgh.pa.us> (raw)
In-Reply-To: <17740-f9e629897b58b2c3@postgresql.org>
References: <17740-f9e629897b58b2c3@postgresql.org>
PG Bug reporting form <noreply@postgresql.org> writes:
> With following entries in pg_hba.conf, psql v13 is prompting for password
> for Kerberos connections, whereas psql v11 succeeds connecting without any
> issue.
> local all pgbkp peer map=pgbackrest
> hostssl all +citi_pg_app_read 0.0.0.0/0 gss map=krb
> host all all 0.0.0.0/0 scram-sha-256
> [kdc_test_fid@icl-actpsql-vm1 /psql13]$ psql -U app_kdc_test_fid -h x.x.x -d
> postgres -p 1524
> Password for user app_kdc_test_fid:
I suspect the v13 libpq is trying GSSAPI encryption before SSL encryption,
so it falls through the hostssl line and ends up at the catchall.
regards, tom lane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-bugs@postgresql.org
Cc: tgl@sss.pgh.pa.us, gopi.anbumech@gmail.com, pgsql-bugs@lists.postgresql.org
Subject: Re: BUG #17740: Connecting postgresql 13 with different psql versions
In-Reply-To: <4092738.1673277565@sss.pgh.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox