Message-ID: <e0e55734-2b1c-4c7f-81a9-96f9b64c3830@tantorlabs.com>
Date: Thu, 10 Jul 2025 17:41:07 +0300
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
From: ivan.kush@tantorlabs.com
To: Jacob Champion <jacob.champion@enterprisedb.com>,
 Tom Lane <tgl@sss.pgh.pa.us>,
 PostgreSQL Hackers <pgsql-hackers@postgresql.org>,
 lev.nikolaev@tantorlabs.com
Subject: Re: [PoC] Federated Authn/z with OAUTHBEARER
References: <83C44AB4-24B0-437F-B139-B5CBC5821BB1@yesql.se>
 <CAOYmi+kOyST1DoF1WOMQvf75L56LiLHZR2+3qTJ+QCg2KC8raQ@mail.gmail.com>
 <CA+hUKGL59uY=UpCHEmTL6dpzuWJBVf1Kc4bQADYDEWG9ZDCffA@mail.gmail.com>
 <CAOYmi+k6HUMK4XQAfnxsmgs1oPOKnchyj2O2a+R7H9jOTU4LPQ@mail.gmail.com>
 <CA+hUKG+mUfH81RuYm5fJrOxdm85hvxLEm=KxXm+n-12FJJH9jA@mail.gmail.com>
 <CAOYmi+nk-KHGGBHz6BGik4+xHPmyPrwOj3ezSM3F4d=-kH_n2Q@mail.gmail.com>
 <CAOYmi+n4EDOOUL27_OqYT2-F2rS6S+3mK-ppWb2Ec92UEoUbYA@mail.gmail.com>
 <CAOYmi+nGstyp4OyL8SFCm3dtkBzNJqGwL7xYhe85=j2hhaXAMw@mail.gmail.com>
 <32e5741d-3dc8-4b15-8c56-cfb26483563c@tantorlabs.com>
 <CAOYmi+mRmRHD-fhXErR0kNqL5NMebPw1EEx++mgmrMAwLszCyw@mail.gmail.com>
 <1328170.1752082586@sss.pgh.pa.us>
 <CAOYmi+ne9_EvK7Z-y78z_6VXnYgXoRbiumMQeWCcy8vHf5t-cw@mail.gmail.com>
 <1338490.1752088027@sss.pgh.pa.us>
 <CAOYmi+kps=uRhx==UjmE2smqgjvigTRemxK5W=WfQ1MCA0ReiQ@mail.gmail.com>
 <1342154.1752090150@sss.pgh.pa.us>
 <CAOYmi+k4in3KLBkrzVJv=hvbuZtuZR2eN_7OZvaKuW3dzEzRDg@mail.gmail.com>
In-Reply-To: 
 <CAOYmi+k4in3KLBkrzVJv=hvbuZtuZR2eN_7OZvaKuW3dzEzRDg@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: quoted-printable
Archived-At: 
 <https://www.postgresql.org/message-id/e0e55734-2b1c-4c7f-81a9-96f9b64c3830%40tantorlabs.com>
Precedence: bulk


I agree with the patch. Works in my OSes

On 7/10/25 2:54 AM, Jacob Champion <jacob.champion@enterprisedb.com> wrot=
e:
> On Wed, Jul 9, 2025 at 12:42=E2=80=AFPM Tom Lane <tgl@sss.pgh.pa.us> wr=
ote:
> > Nah, let's keep them.  We do document for at least some libraries
> > how to manually specify the include and link options without
> > depending on pkg-config.  If someone tries that with libcurl,
> > it'd be good to have sanity checks on the results.
>=20
> Sounds good, thanks for the review!
>=20
> On Wed, Jul 9, 2025 at 11:39=E2=80=AFAM Jacob Champion
> <jacob.champion@enterprisedb.com> wrote:
> > Here is a draft patch for Ivan's reported issue; I still need to put
> > it through its paces with some more unusual setups, but I want to get
> > cfbot on it.
>=20
> On HEAD, Rocky 9 fails to build with a custom Curl PKG_CONFIG_PATH and
> no libcurl-devel installed. With this patch, that build now succeeds,
> and it still succeeds after libcurl-devel is reinstalled, with the
> compiler tests continuing to use the custom libcurl and not the
> system's.
>=20
> So I'll give Ivan a little time in case he'd like to test/review
> again, but otherwise I plan to push it this week.
>=20
> Thanks,
> --Jacob
>=20