From: Christoph Berg <myon@debian.org>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Thomas Munro <thomas.munro@gmail.com>
Cc: PostgreSQL Hackers <pgsql-hackers@postgresql.org>
Subject: Re: ldap tls test fails in some environments
Date: Fri, 15 May 2020 16:25:49 +0200
Message-ID: <20200515142549.GD2691@msg.df7cb.de> (raw)
In-Reply-To: <19554.1589551358@sss.pgh.pa.us>
References: <20200508191644.GA165095@msg.df7cb.de>
<11682.1588966471@sss.pgh.pa.us>
<20200508194533.GB165095@msg.df7cb.de>
<20200513160544.GC373033@msg.df7cb.de>
<CA+hUKG+_n-zt1EAZaZfojjXh9StROu+880pRrXVvtQTWEC_UMg@mail.gmail.com>
<20200514111047.GA445283@msg.df7cb.de>
<20200515121559.GA2691@msg.df7cb.de>
<19554.1589551358@sss.pgh.pa.us>
Re: Tom Lane
> Somebody should get out the LDAP RFCs and decode the packet contents
> that this log helpfully provides, but I suspect that we're just looking
> at an authentication failure; there's still not much clue as to why.
The non-TLS tests work, so it's not a plain auth failure...
I'm attaching the full logs from that test, maybe someone with more
insight can compare the non-TLS with the TLS bits.
Would it help to re-run that with log_debug on the PG side?
Christoph
Attachments:
[application/gzip] 001_auth_node.log.gz (2.3K, ../20200515142549.GD2691@msg.df7cb.de/2-001_auth_node.log.gz)
download
[application/gzip] regress_log_001_auth.gz (35.4K, ../20200515142549.GD2691@msg.df7cb.de/3-regress_log_001_auth.gz)
download
[application/gzip] slapd.log.gz (4.8K, ../20200515142549.GD2691@msg.df7cb.de/4-slapd.log.gz)
download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: myon@debian.org, tgl@sss.pgh.pa.us, thomas.munro@gmail.com
Subject: Re: ldap tls test fails in some environments
In-Reply-To: <20200515142549.GD2691@msg.df7cb.de>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox