Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1aYxVo-0004Mh-67 for pgsql-hackers@arkaria.postgresql.org; Thu, 25 Feb 2016 15:07:28 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.84) (envelope-from ) id 1aYxVn-0001TC-FT for pgsql-hackers@arkaria.postgresql.org; Thu, 25 Feb 2016 15:07:27 +0000 Received: from makus.postgresql.org ([2001:4800:1501:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84) (envelope-from ) id 1aYxVm-0001SZ-7F for pgsql-hackers@postgresql.org; Thu, 25 Feb 2016 15:07:26 +0000 Received: from linode.thelabyrinth.net ([198.58.117.137] helo=mail.thelabyrinth.net) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84) (envelope-from ) id 1aYxVb-0000ZG-7Q for pgsql-hackers@postgresql.org; Thu, 25 Feb 2016 15:07:25 +0000 Received: from Davids-iMac.home (pool-96-243-136-12.tampfl.fios.verizon.net [96.243.136.12]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: dsteele) by mail.thelabyrinth.net (Postfix) with ESMTPSA id 06F2512D13; Thu, 25 Feb 2016 15:07:13 +0000 (UTC) Subject: Re: [PATCH v5] GSSAPI encryption support To: Michael Paquier , Robbie Harwood References: <56BE0FF9.70302@pgmasters.net> <56C72591.6000805@pgmasters.net> Cc: PostgreSQL mailing lists From: David Steele Message-ID: <56CF18A1.5060906@pgmasters.net> Date: Thu, 25 Feb 2016 10:07:13 -0500 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="J7mjSKbipaoH24GCFXQf5oJeOSqAO3959" X-Pg-Spam-Score: -1.9 (-) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-hackers Precedence: bulk Sender: pgsql-hackers-owner@postgresql.org This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --J7mjSKbipaoH24GCFXQf5oJeOSqAO3959 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 2/25/16 2:08 AM, Michael Paquier wrote: > On Wed, Feb 24, 2016 at 7:12 PM, Robbie Harwood w= rote: >> >> Not that I can immediately see. As long as the client and server are >> both patched, everything should work. My process is the same as with >> previous versions of this patchset [0], and though I'm using FreeIPA >> there is no reason it shouldn't work with any other KDC (MIT, for >> instance[1]) provided the IPA calls are converted. >=20 > I used a custom krb5kdc set up manually, and all my connection > attempts are working on HEAD, not with your patch (both client and > server patched). I've got the same setup with the same results. >> I am curious, though - I haven't changed any of the authentication cod= e >> in v4/v5 from what's in ~master, so how often can you log in using >> GSSAPI using master? >=20 > My guess is that there is something not been correctly cleaned up when > closing the connection. The first attempt worked for me, not after. I was able to get in again after a number of failed attempts, though the number varied. --=20 -David david@pgmasters.net --J7mjSKbipaoH24GCFXQf5oJeOSqAO3959 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJWzxihAAoJEIA2uIJQ5SFAHdYQALJashBAo/BJ0gxqmwSoUMd5 SYuZSAeDzJxErXzhCsolL1J2GYH1RIdeY7Zly/morQ6D6EXldCnh/n9GSKQUxWVY SqKgGZM/r1b3rPzdgQ0hIeL5pDk1rReys7yUB9i+TIQoFw3ID+TFV5QeCtLAjIRS +DWBk1P7l9h1IUM4RikkhsPBBLWoNgQ9Hgmlcxy73GCQtrSxNCYaYlEoI/Rey4Ju 40h14eFfGsderJmxSSG4OL/Klv3ItpOP203cCFwIvVxsfGvVyEcv73RKBZPmrR7X 8MPEwt9NVuQeZaCH1G8vBZXkHGxD2lcJh8H/QY7r8KQQVSaKiPqM4NM2hKhRFBXF wgLMhP46cjKLYhdYCKIj1uALKkilcE//ZpWjptrzw0eJCHTNC7dMCoQANUM79R0O 9ZNTWbkG7IPrZhWvsmOM4H1CMOh1dCacZNR0mnf//8g8NPafOKA2arpEp1ijTF9I dPvm4zcCoRuws1BjgONkvoUgI2W6nE1aCX+powyPcfqSRW7NSL7oCkEnAAr+hIvK Dtry+HsjujUyKly38sIKGoUuIRiqM8citUT9qsTxgs6BEHDHgD9cVYRrb9rvs43v pKTWOp1Awi5XTD+VArzVDLAKLak3rSNkzwlJX7Vk2QPsEwP8zLNZ8eTw5EvBJzMh GFT1rpbxBVvd1OQe/xnB =baL+ -----END PGP SIGNATURE----- --J7mjSKbipaoH24GCFXQf5oJeOSqAO3959--