From: Robbie Harwood <rharwood@redhat.com>
To: Stephen Frost <sfrost@snowman.net>
Cc: Bruce Momjian <bruce@momjian.us>, Magnus Hagander <magnus@hagander.net>,
 Joe Conway <mail@joeconway.com>,
 Peter Eisentraut <peter.eisentraut@2ndquadrant.com>,
 Alvaro Herrera <alvherre@2ndquadrant.com>,
 David Steele <david@pgmasters.net>, Michael Paquier <michael@paquier.xyz>,
 Nico Williams <nico@cryptonector.com>,
 PostgreSQL-development <pgsql-hackers@postgresql.org>
Subject: Re: [PATCH v20] GSSAPI encryption support
In-Reply-To: <20190411014700.GY6197@tamriel.snowman.net>
References: <jlg1tgq1ktm.fsf@thriss.redhat.com> <jlgy38mir81.fsf@redhat.com>
 <5ec3f734-810e-36e0-030f-af92efe135da@2ndquadrant.com>
 <20190223162751.GO6197@tamriel.snowman.net>
 <1f799b02-d766-0328-45d6-73e5674d0bc2@2ndquadrant.com>
 <CAOuzzgprZ7-gYkzwkPzMOPka62irppKpXNm219q7a_8Fu33TLw@mail.gmail.com>
 <500b1be7-d0aa-96a2-9982-d748609faff5@joeconway.com>
 <CABUevEyuNNJv=19foa=ycTfTfBUYOEwM8_Uss5OVKrwBAy+Btw@mail.gmail.com>
 <20190409153624.t7cozlctjzuf47ja@momjian.us> <jlg7ec3krmt.fsf@redhat.com>
 <20190411014700.GY6197@tamriel.snowman.net>
Date: Thu, 11 Apr 2019 13:40:49 -0400
Message-ID: <jlg1s2830f2.fsf@redhat.com>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
	micalg=pgp-sha512; protocol="application/pgp-signature"
Precedence: bulk

--=-=-=
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

Stephen Frost <sfrost@snowman.net> writes:

> Robbie Harwood (rharwood@redhat.com) wrote:
>> Bruce Momjian <bruce@momjian.us> writes:
>>> Magnus Hagander wrote:
>>>> Joe Conway <mail@joeconway.com> wrote:
>>>>
>>>> If it was on the table it might have been better to keep hostgss
>>>> and change the authentication method to gssauth or something, but
>>>> that ship sailed *years* ago.
>>>
>>> Uh, did we consider keeping hostgss and changing the auth part at
>>> the end to "gssauth"?
>>=20
>> I think that was implicitly rejected because we'd have to keep the
>> capability to configure "gss" there else break compatibility.
>
> Right, if we changed the name of the auth method then everyone who is
> using the "gss" auth method would have to update their pg_hba.conf
> files...  That would be very ugly.  Also, it wasn't implicitly
> rejected, it was discussed up-thread (see the comments between Magnus
> and I, specifically, quoted above- "that ship sailed *years* ago") and
> explicitly rejected.

Apologies, you're right of course.  I intended to say why *I* had
rejected it but got bit by the passive voice.

Thanks,
=2D-Robbie

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=45jT
-----END PGP SIGNATURE-----
--=-=-=--