From: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
To: Stephen Frost <sfrost@snowman.net>
Cc: Magnus Hagander <magnus@hagander.net>
Cc: Joe Conway <mail@joeconway.com>
Cc: Alvaro Herrera <alvherre@2ndquadrant.com>
Cc: David Steele <david@pgmasters.net>
Cc: Michael Paquier <michael@paquier.xyz>
Cc: Nico Williams <nico@cryptonector.com>
Cc: Robbie Harwood <rharwood@redhat.com>
Cc: PostgreSQL-development <pgsql-hackers@postgresql.org>
Subject: Re: [PATCH v20] GSSAPI encryption support
Date: Fri, 5 Apr 2019 22:41:54 +0200
Message-ID: <f56cacac-0693-23aa-353d-179adbe32f2e@2ndquadrant.com> (raw)
In-Reply-To: <20190405124803.GO6197@tamriel.snowman.net>
References: <20190405025925.GN6197@tamriel.snowman.net>
<7d0584ab-26a8-6731-aeee-9c8e195533e6@2ndquadrant.com>
<20190405124803.GO6197@tamriel.snowman.net>
On 2019-04-05 14:48, Stephen Frost wrote:
> All of it was built against the OS-provided Kerberos install, and you
> got the failure..?
right
> On a failure to set up an encrypted connection, we'll actually fall back
> to a non-encrypted one using GSSAPI *just* for authentication, which is> why I was asking if this worked before the encryption patch went in.
The tests have always worked before. I've run them probably hundreds of
times.
> Also, which of the tests are still failing, exactly? The authentication
> ones or the encryption ones or both?
Only the encryption ones:
not ok 1 - GSS-encrypted access
# Failed test 'GSS-encrypted access'
# at t/002_enc.pl line 170.
# got: '2'
# expected: '0'
ok 2 - GSS encryption disabled
not ok 3 - GSS encryption without auth
# Failed test 'GSS encryption without auth'
# at t/002_enc.pl line 170.
# got: '2'
# expected: '0'
not ok 4 - GSS unencrypted fallback
# Failed test 'GSS unencrypted fallback'
# at t/002_enc.pl line 170.
# got: '2'
# expected: '0'
ok 5 - GSS unencrypted fallback prevention
--
Peter Eisentraut http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: peter.eisentraut@2ndquadrant.com, sfrost@snowman.net, magnus@hagander.net, mail@joeconway.com, alvherre@2ndquadrant.com, david@pgmasters.net, michael@paquier.xyz, nico@cryptonector.com, rharwood@redhat.com
Subject: Re: [PATCH v20] GSSAPI encryption support
In-Reply-To: <f56cacac-0693-23aa-353d-179adbe32f2e@2ndquadrant.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox