| From: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
|---|---|
| To: | Robbie Harwood <rharwood(at)redhat(dot)com> |
| Cc: | Michael Paquier <michael(dot)paquier(at)gmail(dot)com>, PostgreSQL mailing lists <pgsql-hackers(at)postgresql(dot)org>, Stephen Frost <sfrost(at)snowman(dot)net> |
| Subject: | Re: [PATCH v12] GSSAPI encryption support |
| Date: | 2016-07-26 15:29:08 |
| Message-ID: | 18337.1469546948@sss.pgh.pa.us |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
Robbie Harwood <rharwood(at)redhat(dot)com> writes:
> So there's a connection setting `sslmode` that we'll want something
> similar to here (`gssapimode` or so). `sslmode` has six settings, but I
> think we only need three for GSSAPI: "disable", "allow", and "prefer"
> (which presumably would be the default).
FWIW, there is quite a bit of unhappiness around sslmode=prefer, see
for example this thread:
https://www.postgresql.org/message-id/flat/2A5EFBDC-41C6-42A8-8B6D-E69DA60E9962%40eggerapps.at
I do not know if we can come up with a better answer, but I'd caution
you against thinking that that's a problem-free model to emulate.
regards, tom lane
| From | Date | Subject | |
|---|---|---|---|
| Next Message | John Harvey | 2016-07-26 15:41:49 | MSVC pl-perl error message is not verbose enough |
| Previous Message | Robbie Harwood | 2016-07-26 15:28:11 | Re: [PATCH v12] GSSAPI encryption support |