MIME-Version: 1.0
References: <83C44AB4-24B0-437F-B139-B5CBC5821BB1@yesql.se>
 <CA+hUKGJ+WyJ26QGvO_nkgvbxgw+03U4EQ4Hxw+QBft6Np+XW7w@mail.gmail.com>
 <CAOYmi+mf+hw7x+E3XkRypEGy=yR3n6zowjjXeXaSK20WxX3UGw@mail.gmail.com>
 <CAOYmi+kr-Eh7utEDZBFq8Mc9byLLRF3ZNc0TaHt78SKwB4T5KA@mail.gmail.com>
 <CA+hUKGL3yYmKmNHw1wnpuhCbqaiDw1DDUhghEDrh6y97Ygzw9Q@mail.gmail.com>
 <CAOYmi+kOyST1DoF1WOMQvf75L56LiLHZR2+3qTJ+QCg2KC8raQ@mail.gmail.com>
 <CA+hUKGL59uY=UpCHEmTL6dpzuWJBVf1Kc4bQADYDEWG9ZDCffA@mail.gmail.com>
 <CAOYmi+k6HUMK4XQAfnxsmgs1oPOKnchyj2O2a+R7H9jOTU4LPQ@mail.gmail.com>
 <CA+hUKG+mUfH81RuYm5fJrOxdm85hvxLEm=KxXm+n-12FJJH9jA@mail.gmail.com>
 <CAOYmi+nk-KHGGBHz6BGik4+xHPmyPrwOj3ezSM3F4d=-kH_n2Q@mail.gmail.com>
 <CAOYmi+n4EDOOUL27_OqYT2-F2rS6S+3mK-ppWb2Ec92UEoUbYA@mail.gmail.com>
 <CAOYmi+nGstyp4OyL8SFCm3dtkBzNJqGwL7xYhe85=j2hhaXAMw@mail.gmail.com>
 <32e5741d-3dc8-4b15-8c56-cfb26483563c@tantorlabs.com>
 <CAOYmi+mRmRHD-fhXErR0kNqL5NMebPw1EEx++mgmrMAwLszCyw@mail.gmail.com>
 <CAOYmi+=ORLb7mYdLRyrBE5ZGKd74HC4akLF-Vky-yPZCH38=yQ@mail.gmail.com>
 <1328170.1752082586@sss.pgh.pa.us>
In-Reply-To: <1328170.1752082586@sss.pgh.pa.us>
From: Jacob Champion <jacob.champion@enterprisedb.com>
Date: Wed, 9 Jul 2025 10:59:47 -0700
Message-ID: 
 <CAOYmi+=psRLP1bKQKzsKk5RH2De0sBoyjNPQBNUxSOyoKt95rw@mail.gmail.com>
Subject: Re: [PoC] Federated Authn/z with OAUTHBEARER
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Ivan Kush <ivan.kush@tantorlabs.com>,
	PostgreSQL Hackers <pgsql-hackers@postgresql.org>,
 lev.nikolaev@tantorlabs.com
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: 
 <https://www.postgresql.org/message-id/CAOYmi%2B%3DpsRLP1bKQKzsKk5RH2De0sBoyjNPQBNUxSOyoKt95rw%40mail.gmail.com>
Precedence: bulk

On Wed, Jul 9, 2025 at 10:36=E2=80=AFAM Tom Lane <tgl@sss.pgh.pa.us> wrote:
> Per "man dlopen", you have to link with libdl to use these functions
> on this platform.  (Curiously, although RHEL9 still says that in the
> documentation, it doesn't seem to actually need -ldl.)  I was able
> to resolve this by adding -ldl in libpq's Makefile:
>
> -SHLIB_LINK +=3D $(filter -lcrypt -ldes -lcom_err -lcrypto -lk5crypto -lk=
rb5 -lgssapi_krb5 -lgss -lgssapi -lssl -lsocket -lnsl -lresolv -lintl -lm, =
$(LIBS)) $(LDAP_LIBS_FE) $(PTHREAD_LIBS)
> +SHLIB_LINK +=3D $(filter -lcrypt -ldes -lcom_err -lcrypto -lk5crypto -lk=
rb5 -lgssapi_krb5 -lgss -lgssapi -lssl -lsocket -lnsl -lresolv -lintl -ldl =
-lm, $(LIBS)) $(LDAP_LIBS_FE) $(PTHREAD_LIBS)

Hmm, okay. That analysis and fix look good to me. (It looks like none
of the RHEL animals are testing with Curl yet, and locally I was using
Rocky 9...)

I'll work up a patch to send through the CI. I can't currently test
RHEL8 easily -- Rocky 8 is incompatible with my Macbook? -- which I
will need to rectify eventually, but I can't this week.

Thanks!
--Jacob