pg.ddx.io  pgsql-hackers@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
To: Stephen Frost <sfrost@snowman.net>
Cc: Magnus Hagander <magnus@hagander.net>
Cc: Joe Conway <mail@joeconway.com>
Cc: Alvaro Herrera <alvherre@2ndquadrant.com>
Cc: David Steele <david@pgmasters.net>
Cc: Michael Paquier <michael@paquier.xyz>
Cc: Nico Williams <nico@cryptonector.com>
Cc: Robbie Harwood <rharwood@redhat.com>
Cc: PostgreSQL-development <pgsql-hackers@postgresql.org>
Subject: Re: [PATCH v20] GSSAPI encryption support
Date: Thu, 4 Apr 2019 21:05:16 +0200
Message-ID: <6c1cd334-cf1d-58b5-ffe0-5d4688538024@2ndquadrant.com> (raw)
In-Reply-To: <20190404153537.GL6197@tamriel.snowman.net>
References: <jlg1tgq1ktm.fsf@thriss.redhat.com>
	<jlgy38mir81.fsf@redhat.com>
	<5ec3f734-810e-36e0-030f-af92efe135da@2ndquadrant.com>
	<20190223162751.GO6197@tamriel.snowman.net>
	<1f799b02-d766-0328-45d6-73e5674d0bc2@2ndquadrant.com>
	<CAOuzzgprZ7-gYkzwkPzMOPka62irppKpXNm219q7a_8Fu33TLw@mail.gmail.com>
	<500b1be7-d0aa-96a2-9982-d748609faff5@joeconway.com>
	<CABUevEyuNNJv=19foa=ycTfTfBUYOEwM8_Uss5OVKrwBAy+Btw@mail.gmail.com>
	<20190403144332.GD6197@tamriel.snowman.net>
	<7b7035e0-3691-ca63-0957-25d17dc11514@2ndquadrant.com>
	<20190404153537.GL6197@tamriel.snowman.net>

On 2019-04-04 17:35, Stephen Frost wrote:
> Ok, it looks like there's a server-side error happening here, and it
> would be good to see what that is, so can you send the server logs?

These errors appear several times in the server logs:

FATAL:  GSSAPI context error
DETAIL:   Miscellaneous failure (see text): Decrypt integrity check
failed for checksum type hmac-sha1-96-aes256, key type
aes256-cts-hmac-sha1-96

FATAL:  accepting GSS security context failed
DETAIL:   Miscellaneous failure (see text): Decrypt integrity check
failed for checksum type hmac-sha1-96-aes256, key type
aes256-cts-hmac-sha1-96

-- 
Peter Eisentraut              http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services





view thread (220+ messages)  latest in thread

Message-ID: <6c1cd334-cf1d-58b5-ffe0-5d4688538024@2ndquadrant.com>
Permalink:  ../6c1cd334-cf1d-58b5-ffe0-5d4688538024@2ndquadrant.com/
Also on:    postgresql.org/message-id/6c1cd334-cf1d-58b5-ffe0-5d4688538024@2ndquadrant.com

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-hackers@postgresql.org
  Cc: peter.eisentraut@2ndquadrant.com, sfrost@snowman.net, magnus@hagander.net, mail@joeconway.com, alvherre@2ndquadrant.com, david@pgmasters.net, michael@paquier.xyz, nico@cryptonector.com, rharwood@redhat.com
  Subject: Re: [PATCH v20] GSSAPI encryption support
  In-Reply-To: <6c1cd334-cf1d-58b5-ffe0-5d4688538024@2ndquadrant.com>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox