Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1bS4HN-0006UT-Tx for pgsql-hackers@arkaria.postgresql.org; Tue, 26 Jul 2016 15:28:22 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.84_2) (envelope-from ) id 1bS4HN-0004OO-CR for pgsql-hackers@arkaria.postgresql.org; Tue, 26 Jul 2016 15:28:21 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1bS4HM-0004Nk-5j for pgsql-hackers@postgresql.org; Tue, 26 Jul 2016 15:28:20 +0000 Received: from mx1.redhat.com ([209.132.183.28]) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1bS4HJ-00027k-PT for pgsql-hackers@postgresql.org; Tue, 26 Jul 2016 15:28:19 +0000 Received: from int-mx09.intmail.prod.int.phx2.redhat.com (int-mx09.intmail.prod.int.phx2.redhat.com [10.5.11.22]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id C4AE36341; Tue, 26 Jul 2016 15:28:15 +0000 (UTC) Received: from localhost (vpn1-4-144.ams2.redhat.com [10.36.4.144]) by int-mx09.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id u6QFSEPo023482; Tue, 26 Jul 2016 11:28:15 -0400 From: Robbie Harwood To: Michael Paquier Cc: PostgreSQL mailing lists , Tom Lane , Stephen Frost Subject: Re: [PATCH v12] GSSAPI encryption support In-Reply-To: References: <20160406112105.GG10850@tamriel.snowman.net> <1530.1459977031@sss.pgh.pa.us> <5486.1459984857@sss.pgh.pa.us> User-Agent: Notmuch/0.22.1 (http://notmuchmail.org) Emacs/24.5.1 (x86_64-pc-linux-gnu) Date: Tue, 26 Jul 2016 11:28:11 -0400 Message-ID: MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha1; protocol="application/pgp-signature" X-Scanned-By: MIMEDefang 2.68 on 10.5.11.22 X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16 (mx1.redhat.com [10.5.110.38]); Tue, 26 Jul 2016 15:28:15 +0000 (UTC) X-Pg-Spam-Score: -8.2 (--------) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-hackers Precedence: bulk Sender: pgsql-hackers-owner@postgresql.org --=-=-= Content-Type: text/plain Robbie Harwood writes: > So there's a connection setting `sslmode` that we'll want something > similar to here (`gssapimode` or so). `sslmode` has six settings, but I > think we only need three for GSSAPI: "disable", "allow", and "prefer" > (which presumably would be the default). Apologies, this should say four; I neglected "require". --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJXl4GLAAoJECUy+RdqlaRCzE0P/iGz/yHZXQw9rP3p8BDkKbPg ERCXNblgn8zIx71feW8D1c8ungPtCnym4BMN8h/q5pD+d89Xj2R92cTzg7pBmd1C G6/9f+K0bFO7KyFeZwz5wYOY+N1Qt4DCvnlcqcJaMW2u8dGCBDHzoveVayfej57I cKOIJO+9rd0hRdbBrQ8ybx4Y9L3zO80hGaHv+pw4d1qko/hIMa39+UgG5lW0Lzbg OV6cSdA2dZ9moeA9RnZrW8f2tKYlX1IiAXJNnjD7/AeZD7hWKFQDFJ8VbMrBI0Ii vwFx5aCn2q+kBfNiiv+lGN62ocEzmnB+/oUaCt1nMzqVtgyFKmFasdy/OcoY2vmS Zn28DMy47mbJRXtVhbMZVRdwERbbI/qgeIP2XlIHuBVq6rYmoQ+yysvD6v7OtXie WWg4r931q8uEgzr4em5FyI7CK0m6/I32My0Damw1qRihwzp399M0x9q2WupNVYXs 1XIx9yMl/nv0Rh8jxwGmWhArccv+h9PIFkBZCv66aQeDVdSE6k202Yaas+wHm/St fXZC+RmQsFcHicCHX7iWHLs2cD+pVdiQkLuE2JB2/UaZnfAB67yFVsMOpjytQsM8 7UqPYGuhA4jmYujvrjFuNQYPv+dhbk1F2nnonnTCPLErWL6VNGYj45lVzhg1W8Ok 4r052gKE2IpPtTCfFAol =m8zs -----END PGP SIGNATURE----- --=-=-=--