From: David Steele <david@pgmasters.net>
To: Michael Paquier <michael.paquier@gmail.com>
To: Robbie Harwood <rharwood@redhat.com>
Cc: PostgreSQL mailing lists <pgsql-hackers@postgresql.org>
Subject: Re: [PATCH v5] GSSAPI encryption support
Date: Thu, 25 Feb 2016 10:07:13 -0500
Message-ID: <56CF18A1.5060906@pgmasters.net> (raw)
In-Reply-To: <CAB7nPqTn65qwpePPUjf=V8wgW3+Dqx8Ck+JrPDN0Djbr9S2MUA@mail.gmail.com>
References: <jlg1tgq1ktm.fsf@thriss.redhat.com>
<jlg4mdg8ebw.fsf@thriss.redhat.com>
<56BE0FF9.70302@pgmasters.net>
<jlgtwl9g95m.fsf@thriss.redhat.com>
<56C72591.6000805@pgmasters.net>
<jlg1t81excp.fsf@thriss.redhat.com>
<CAB7nPqTn65qwpePPUjf=V8wgW3+Dqx8Ck+JrPDN0Djbr9S2MUA@mail.gmail.com>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-hackers>
On 2/25/16 2:08 AM, Michael Paquier wrote:
> On Wed, Feb 24, 2016 at 7:12 PM, Robbie Harwood <rharwood@redhat.com> wrote:
>>
>> Not that I can immediately see. As long as the client and server are
>> both patched, everything should work. My process is the same as with
>> previous versions of this patchset [0], and though I'm using FreeIPA
>> there is no reason it shouldn't work with any other KDC (MIT, for
>> instance[1]) provided the IPA calls are converted.
>
> I used a custom krb5kdc set up manually, and all my connection
> attempts are working on HEAD, not with your patch (both client and
> server patched).
I've got the same setup with the same results.
>> I am curious, though - I haven't changed any of the authentication code
>> in v4/v5 from what's in ~master, so how often can you log in using
>> GSSAPI using master?
>
> My guess is that there is something not been correctly cleaned up when
> closing the connection. The first attempt worked for me, not after.
I was able to get in again after a number of failed attempts, though the
number varied.
--
-David
david@pgmasters.net
Attachments:
signature.asc (application/pgp-signature, 841B) download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: david@pgmasters.net, michael.paquier@gmail.com, rharwood@redhat.com
Subject: Re: [PATCH v5] GSSAPI encryption support
In-Reply-To: <56CF18A1.5060906@pgmasters.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox