Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.84) (envelope-from ) id 1adhOP-0002u8-NC for pgsql-hackers@arkaria.postgresql.org; Wed, 09 Mar 2016 16:55:25 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.84) (envelope-from ) id 1adhOP-000806-9j for pgsql-hackers@arkaria.postgresql.org; Wed, 09 Mar 2016 16:55:25 +0000 Received: from makus.postgresql.org ([2001:4800:1501:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84) (envelope-from ) id 1adhON-0007w6-DL for pgsql-hackers@postgresql.org; Wed, 09 Mar 2016 16:55:23 +0000 Received: from linode.thelabyrinth.net ([198.58.117.137] helo=mail.thelabyrinth.net) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84) (envelope-from ) id 1adhOK-0000Se-GP for pgsql-hackers@postgresql.org; Wed, 09 Mar 2016 16:55:22 +0000 Received: from Davids-iMac.local (unknown [98.204.177.190]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: dsteele) by mail.thelabyrinth.net (Postfix) with ESMTPSA id A4FE912D13; Wed, 9 Mar 2016 16:55:18 +0000 (UTC) Subject: Re: [PATCH v6] GSSAPI encryption support To: Robbie Harwood , pgsql-hackers@postgresql.org References: Cc: Michael Paquier From: David Steele Message-ID: <56E05575.9060200@pgmasters.net> Date: Wed, 9 Mar 2016 11:55:17 -0500 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="j6mbgEc4NkI7tLkilNViMTQXvxeLCeUo7" X-Pg-Spam-Score: -1.9 (-) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-hackers Precedence: bulk Sender: pgsql-hackers-owner@postgresql.org This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --j6mbgEc4NkI7tLkilNViMTQXvxeLCeUo7 Content-Type: multipart/mixed; boundary="AIr7SJ78oaa560im0OH2MweDdhFngEwxG" From: David Steele To: Robbie Harwood , pgsql-hackers@postgresql.org Cc: Michael Paquier Message-ID: <56E05575.9060200@pgmasters.net> Subject: Re: [HACKERS] [PATCH v6] GSSAPI encryption support References: In-Reply-To: --AIr7SJ78oaa560im0OH2MweDdhFngEwxG Content-Type: multipart/mixed; boundary="------------050508040506040108050803" This is a multi-part message in MIME format. --------------050508040506040108050803 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable Hi Robbie, On 3/8/16 5:44 PM, Robbie Harwood wrote: > Hello friends, >=20 > Here's yet another version of GSSAPI encryption support. It's also > available for viewing on my github: I got this warning when applying the first patch in the set: =2E./other/v6-0001-Move-common-GSSAPI-code-into-its-own-files.patch:245: new blank line at EOF. + warning: 1 line adds whitespace errors. I know it's minor but I'm always happier when patches apply cleanly. The build went fine but when testing I was unable to logon at all. I'm using the same methodology as in http://www.postgresql.org/message-id/56BE0FF9.70302@pgmasters.net except that I'm running against 51c0f63 and using the v6 patch set. psql simply hangs and never returns. I have attached a pcap of the psql/postgres session generated with: tcpdump -i lo -nnvvXSs 1514 port 5432 -w gssapi.pcap If you would like me to capture more information please let me know specifically how you would like me to capture it. I reverted to v5 and got the same behavior I was seeing with v4 and v5, namely that I can only logon occasionally and usually get this error: psql: expected authentication request from server, but received Using a fresh build from 51c0f63 I can logon reliably every time so I don't think there's an issue in my environment. --=20 -David david@pgmasters.net --------------050508040506040108050803 Content-Type: application/octet-stream; x-mac-type="0"; x-mac-creator="0"; name="gssapi.pcap" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="gssapi.pcap" 1MOyoQIABAAAAAAAAAAAAOoFAAABAAAA1DzgVnsIBQBeAAAAXgAAAAAAAAAAAAAAAAAAAIbd YAAAAAAoBkAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAaW6FTgLiuY5AAAAAKAC qqoAMAAAAgT/xAQCCAoAC3bqAAAAAAEDAwfUPOBWgggFAF4AAABeAAAAAAAAAAAAAAAAAAAA ht1gAAAAACgGQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABFTiluvFEmKULiuY6 oBKqqgAwAAACBP/EBAIICgALduoAC3bqAQMDB9Q84FaHCAUAVgAAAFYAAAAAAAAAAAAAAAAA AACG3WAAAAAAIAZAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAGluhU4C4rmOvFE mKaAEAFWACgAAAEBCAoAC3bqAAt26tQ84FZKCQUAxgAAAMYAAAAAAAAAAAAAAAAAAACG3WAA AAAAkAZAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAGluhU4C4rmOvFEmKaAGAFW AJgAAAEBCAoAC3bqAAt26gAAAHAAAwAAdXNlcgB2YWdyYW50QFBHTUFTVEVSUy5ORVQAZGF0 YWJhc2UAcG9zdGdyZXMAYXBwbGljYXRpb25fbmFtZQBwc3FsAGNsaWVudF9lbmNvZGluZwBV VEY4AGdzc19lbmNyeXB0AG9uAADUPOBWTQkFAFYAAABWAAAAAAAAAAAAAAAAAAAAht1gAAAA ACAGQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABFTiluvFEmKYLiuaqgBABVgAo AAABAQgKAAt26gALdurUPOBWAgsFAF8AAABfAAAAAAAAAAAAAAAAAAAAht1gAAAAACkGQAAA AAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABFTiluvFEmKYLiuaqgBgBVgAxAAABAQgK AAt26gALdupSAAAACAAAAAfUPOBWBgsFAFYAAABWAAAAAAAAAAAAAAAAAAAAht1gAAAAACAG QAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABpboVOAuK5qrxRJivgBABVgAoAAAB AQgKAAt26gALdurUPOBWYg0FAPYCAAD2AgAAAAAAAAAAAAAAAAAAht1gAAAAAsAGQAAAAAAA AAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABpboVOAuK5qrxRJivgBgBVgLIAAABAQgKAAt2 6gALdupwAAACn2CCApcGCSqGSIb3EgECAgEAboIChjCCAoKgAwIBBaEDAgEOogcDBQAgAAAA o4IBdmGCAXIwggFuoAMCAQWhDxsNUEdNQVNURVJTLk5FVKIgMB6gAwIBA6EXMBUbCHBvc3Rn cmVzGwlsb2NhbGhvc3SjggEyMIIBLqADAgEQoQMCAQKiggEgBIIBHCanFbN4cqppvNp8fGkZ tjgEWpZdw053LR7AC7jhMC4awmHmkpBQMvgo/RdzFZtJbFUFF7vdHltt4OeDz662Sw0A6cfa pae8VMHvCWaCNLljLtovCr7b1473ZmP+B43FzI0ShDdoMBZ1qN+YgUefsVtqd7EsfN9G8Qko tA8xP/0Fv5klZer16FV/cvBWwlIeTlwr0yX5hh/njzWjrQdb8YQQv4qldmMkOYt9XxpZddBZ /rz8UD4OGlX3l4lRYHMaL6wvoAVfXkjdeJyYtpEIWDwL6DIkZIDAOFMu6ivzUYli4CPNX4cn Dsns0ia/xnJHVyyyHPwX9ua5kiLViS0AahThGqcB7UtdIP9P/OeC4pDDyMr6broz5xh/ta6c pIHyMIHvoAMCARCigecEgeTWC5RlgTSfgxp1rBMb36CoyWcr/9KtIgmXemx42iBRcvCNg9G0 OqVQKMA+uK3draceAHNH8PTF2NJ+FgQc2tmUuzuZfUul9tPX5Gsc/+aTcKZlpneq+BpnSQI9 iyZogKYyoB4xs43Okadj6uN4NBwITOPURRMe2lGHs8LwVnuG9BkQki70mlei78ICvGF54amu 95MD1haQOVS6d/aX4sYWL/9/ZJmKhXzr33WnvIx4OeG3lHlwOdU0DYzJlgrGcJY9sBiqXHwA lYqHh6ckwGTgi37XwbM8kinZbH32DpuG8pCz+EHUPOBWrB4FAAABAAAAAQAAAAAAAAAAAAAA AAAAht1gAAAAAMoGQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABFTiluvFEmK8L iulKgBgBYADSAAABAQgKAAt26wALdupSAAAAqQAAAAhggZ4GCSqGSIb3EgECAgIAb4GOMIGL oAMCAQWhAwIBD6J/MH2gAwIBEKJ2BHQId002PI1/t9DXNxe55W+CkfhO5+D1Ohy5Pl5wnIMj LrvYZLMkuVSZmgJ7sPD1kzcHxvk+sZVxcLIu/+Cf2RIpxhGojj1CGlK/z1i5Rn/jwExrw2+u kILdOsmNeBqHmZA5i6L6zemFc/6/56uDbZ7tOjV8R9Q84FbOHgUAXwAAAF8AAAAAAAAAAAAA AAAAAACG3WAAAAAAKQZAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAEVOKW68USZ WQuK6UqAGAFgADEAAAEBCAoAC3brAAt26lIAAAAIAAAAANQ84FbXIAUA4AEAAOABAAAAAAAA AAAAAAAAAACG3WAAAAABqgZAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAEVOKW6 8USZYguK6UqAGAFgAbIAAAEBCAoAC3brAAt26gAAAYYFBAf/AAAAAAAAAAAjkZE01q/rPXIZ uuWdV1EbR9KLwVFmtBokWq3Hjrf03q3iFLjLa4yblHIr3cFkQrAyJwGvMm2N1rMWV9O4ygHJ MwqDQi3QNBDAdz8+9AEUupNQx503CRtQAxU2L3aGMM32qxBDNWlOeHsyNRwF3gX9s8gSoQ1v ciF5u29VObM3RlKHf0dRq6Hq9qQ6/qhDpc8ggOaYUj8K4aME6tFsYCL1W0ZDxphpUu188dpj oHhL+lijm6628XBPiNr7darHI6vcvivWQoJYRtl9M5NFo6uGjJSFDkDIA06gEScn559MpD0m 9S3Ozn1jIQ33uVM3SHFWrDlYXU1fRuEhbrObjkAsQ5PqnGuQN+hHBwJ3n5wDLmHz7Z3tsbY5 M8C8DKmudoqJjM1zfhBop1MVsSbjgyIieo1XsE0uPDqp7gkipx3tW2IApoVCQbe6giq+c/kK 59IOns6zRkm5L35rwd6rUdbg1JPmaGGcEpGIU+CNS2JEXo9mfhWj0/LVLtbUPOBW2iAFAFYA AABWAAAAAAAAAAAAAAAAAAAAht1gAAAAACAGQAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAA AAAAAAABpboVOAuK6UrxRJrsgBABZwAoAAABAQgKAAt26wALdus= --------------050508040506040108050803-- --AIr7SJ78oaa560im0OH2MweDdhFngEwxG-- --j6mbgEc4NkI7tLkilNViMTQXvxeLCeUo7 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJW4FV1AAoJEIA2uIJQ5SFACVMQAJiSd2yp5x4jdzieVo3d974h 1/NTEqHp01HgB8mQsxbMtBdyfK8oE7MoIQrvqAlcLwp/NspyfSTyw1A5aHsvVKxU bLn6+O4W1xxCKAnhyD4Ai8fpDtRRoxyAKgl87iCEitF767OfHV3TmO29iEUpmWVr TOG+ZbYLiqsIHfjrzOg7zW/wL41yYKx8OLyrWKyoWtjDRk6yYzZv25bCQIr5AhFL Ek6FbeZLYZHImPxL7FIkpQ5EabBvHZ3mngPFfNt2ZU+VqeLTNGJRTdcBEeC40irg d3ZXmQnvRObJBj4bh43SMAX0oNcynwcwDcRIsoGAJMUEh+8iejphYob910aKU6bG AXQzeS9pjQGDq9n96u8l14EJEBgcLu1f/Y9I1IJ9Fz3vO9D/w6T9h4sGLMJxS1Bc HcarrLvk369MTMFZUb0nCZiGcivmvb8Atvj4tQyKK2jJ5Tiqz+LG0jpVe0lBBZzK KkvGGJJ00BFry+B6OwXERHyCDymdEosNNVmmhgfiMpXTF0eFnogDNuYoCcrkiWSI CkkVEPxiZxcYbLzdkSCmkeJ1PSeIbtiVRDNFNHDArvoVqudQrPMHjwuarzgvXDS9 J78bau5jaEF9bwpFquWYnTGHKD5gsowucVB69LktNBH4ebB6NZRZ3+h/1Eb3FXEW QmPvJcF1ssgWD1IS3SlY =IbbD -----END PGP SIGNATURE----- --j6mbgEc4NkI7tLkilNViMTQXvxeLCeUo7--