Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1ru0Z3-001aBB-Kn for pgsql-committers@arkaria.postgresql.org; Tue, 09 Apr 2024 01:46:22 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1ru0Z2-00FLCq-IG for pgsql-committers@arkaria.postgresql.org; Tue, 09 Apr 2024 01:46:20 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1ru0Z2-00FLCg-B0 for pgsql-committers@lists.postgresql.org; Tue, 09 Apr 2024 01:46:20 +0000 Received: from mail-pf1-x431.google.com ([2607:f8b0:4864:20::431]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1ru0Yz-001v8p-R6 for pgsql-committers@lists.postgresql.org; Tue, 09 Apr 2024 01:46:19 +0000 Received: by mail-pf1-x431.google.com with SMTP id d2e1a72fcca58-6eaf1005fcaso3489846b3a.3 for ; Mon, 08 Apr 2024 18:46:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1712627177; x=1713231977; darn=lists.postgresql.org; h=content-transfer-encoding:mime-version:user-agent:references :in-reply-to:from:subject:cc:to:message-id:date:from:to:cc:subject :date:message-id:reply-to; bh=zUPiHO6mrl4qiSNH1UQKmT7rM8TXSibcgzOnv/QaRlY=; b=VTuJdf3jGMThFW+Giojn1hQIlphh+EZYNIJAQ+Cu34q+buarwfF9U3YKnQEnnWviSn HQFXiWa4hJTGKsWtZxAGyfM0y8zVWpFxxqPWXr82vzMiJajic/FhHV+ZG7IZ3LmR5HbX m9HIB/QsmxRQG1L/7FQ5mExHWvs1fVyTXbC5YBALlhcyuMfuzzOsYLbIrr+GOB4MhliL WTTNHPet01vfJ9aCKkz/DvzuMFXFZmqNT287noDx/AbtiIKwlUK2awT65qFnf+OImibZ iqr9Qy5ZueECMOmqHKgLyHeyMWza497NgvKsOC7IzibMLVFrb22jT1myjF9DIY09X+cH F6Zg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1712627177; x=1713231977; h=content-transfer-encoding:mime-version:user-agent:references :in-reply-to:from:subject:cc:to:message-id:date:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=zUPiHO6mrl4qiSNH1UQKmT7rM8TXSibcgzOnv/QaRlY=; b=DF2BmLWRt2XQ1PGGccDMa1ggRuMWG1LkTpdOkMUMIg8BB7tV5zLn5X2THpzF6XTTNu 8UGCnQfHTiDtzUQl2f57He7kWan41nqj4wbgmUkzFOt9LAd8NVbeBeNc0c7kUDZY0UHV w0LzBgJAdnGOyYiKWJnsVwo8XopTN2bdPuWd+cwCz/ZCDjPdlmR+k/4bcETAe5oBC/dM DTpi8FpAJaKAmSEr9TY7Dw0SCbZJhQkF6f0R4NlOKV/A9s2QcY3Ymr4FNrvSVCGhur06 LfLbAzVq2rtGYeIb01GQ7F2HTIxpsKQKKiq9xqrOF1Uwlu0PP/MO2w7kDoHxC6umriOO Xd7Q== X-Gm-Message-State: AOJu0Yz9R93Yt3BvhflcioLtisih4x4R2MZRvab3kzYElxuMb54zy3kU 8Qz0V6nUq5mZg1MMvKQxKGz5KWwXaIpkZNGBU2tAUqLuKHVbsv+R X-Google-Smtp-Source: AGHT+IFVxQeUdDq3StCoog2WOzmQGxMcKALyXABIugRBuFFpuasyxJa1rkutnekPjjj3vag/fInKEw== X-Received: by 2002:a05:6a00:1951:b0:6ea:c04c:a899 with SMTP id s17-20020a056a00195100b006eac04ca899mr10418153pfk.20.1712627176755; Mon, 08 Apr 2024 18:46:16 -0700 (PDT) Received: from localhost (KD036014041111.ppp-bb.dion.ne.jp. [36.14.41.111]) by smtp.gmail.com with ESMTPSA id kt4-20020a056a004ba400b006e6b3c4e70bsm7494028pfb.171.2024.04.08.18.46.15 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 08 Apr 2024 18:46:16 -0700 (PDT) Date: Tue, 09 Apr 2024 10:46:13 +0900 (JST) Message-Id: <20240409.104613.1653854506705708036.horikyota.ntt@gmail.com> To: heikki.linnakangas@iki.fi Cc: pgsql-committers@lists.postgresql.org Subject: Re: pgsql: With gssencmode='require', check credential cache before connect From: Kyotaro Horiguchi In-Reply-To: References: User-Agent: Mew version 6.8 on Emacs 27.2 Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk Hello. At Sun, 07 Apr 2024 23:50:08 +0000, Heikki Linnakangas wrote in > With gssencmode='require', check credential cache before connecting This commit adds the following error message (indentations are adjusted): + libpq_append_conn_error(conn, + "GSSAPI encryption required but it is not supported over a local socket)"); The closing parenthesis at the end of the message seems to be a leftover from editing. diff --git a/src/interfaces/libpq/fe-connect.c b/src/interfaces/libpq/fe-connect.c index 4bd523ec6e..e35bdc4036 100644 --- a/src/interfaces/libpq/fe-connect.c +++ b/src/interfaces/libpq/fe-connect.c @@ -2927,7 +2927,7 @@ keep_going: /* We will come back to here until there is if (conn->raddr.addr.ss_family == AF_UNIX) { libpq_append_conn_error(conn, - "GSSAPI encryption required but it is not supported over a local socket)"); + "GSSAPI encryption required but it is not supported over a local socket"); goto error_return; } if (conn->gcred == GSS_C_NO_CREDENTIAL) About the following message: + libpq_append_conn_error(conn, "could not set ssl alpn extension: %s", err); I'm not sure about the policy for writing acronyms in lowercase, but other occurrences of ALPN (in backend code) seem to be written in uppercase. regards. -- Kyotaro Horiguchi NTT Open Source Software Center