From: David Steele <david@pgmasters.net>
To: Robbie Harwood <rharwood@redhat.com>
Cc: Michael Paquier <michael.paquier@gmail.com>
Cc: Pg Hackers <pgsql-hackers@postgresql.org>
Subject: Re: [PATCH v6] GSSAPI encryption support
Date: Tue, 15 Mar 2016 10:12:34 -0400
Message-ID: <56E81852.1060005@pgmasters.net> (raw)
In-Reply-To: <jlgegbkmvxl.fsf@thriss.redhat.com>
References: <jlg1tgq1ktm.fsf@thriss.redhat.com>
<jlgegbkmvxl.fsf@thriss.redhat.com>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-hackers>
On 3/8/16 5:44 PM, Robbie Harwood wrote:
> Here's yet another version of GSSAPI encryption support.
OK, everything seems to be working fine with a 9.6 client and server so
next I tested older clients and I got this error:
$ /usr/lib/postgresql/9.1/bin/psql -h localhost \
-U vagrant@PGMASTERS.NET postgres
psql: FATAL: GSSAPI did no provide required flags
There's a small typo in the error message, BTW.
Here's the output from the server logs:
DEBUG: forked new backend, pid=7746 socket=9
DEBUG: postgres child[7746]: starting with (
DEBUG: postgres
DEBUG: )
DEBUG: InitPostgres
DEBUG: my backend ID is 2
DEBUG: StartTransaction
DEBUG: name: unnamed; blockState: DEFAULT; state: INPROGR,
xid/subid/cid: 0/1/0, nestlvl: 1, children:
DEBUG: Processing received GSS token of length 667
DEBUG: gss_accept_sec_context major: 0, minor: 0, outlen: 161,
outflags: 1b2
DEBUG: sending GSS response token of length 161
DEBUG: sending GSS token of length 161
FATAL: GSSAPI did no provide required flags
DEBUG: shmem_exit(1): 1 before_shmem_exit callbacks to make
DEBUG: shmem_exit(1): 6 on_shmem_exit callbacks to make
DEBUG: proc_exit(1): 3 callbacks to make
DEBUG: exit(1)
DEBUG: shmem_exit(-1): 0 before_shmem_exit callbacks to make
DEBUG: shmem_exit(-1): 0 on_shmem_exit callbacks to make
DEBUG: proc_exit(-1): 0 callbacks to make
DEBUG: reaping dead processes
DEBUG: server process (PID 7746) exited with exit code 1
I got the same result with a 9.4 client so didn't try any others.
--
-David
david@pgmasters.net
Attachments:
signature.asc (application/pgp-signature, 841B) download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: david@pgmasters.net, rharwood@redhat.com, michael.paquier@gmail.com
Subject: Re: [PATCH v6] GSSAPI encryption support
In-Reply-To: <56E81852.1060005@pgmasters.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox