Skip site navigation (1) Skip section navigation (2)

Re: [HACKERS] Kerberos brokenness and oops question in 8.1beta2

From: Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: Magnus Hagander <mha(at)sollentuna(dot)net>,PostgreSQL-patches <pgsql-patches(at)postgresql(dot)org>
Subject: Re: [HACKERS] Kerberos brokenness and oops question in 8.1beta2
Date: 2005-10-13 17:04:34
Message-ID: 200510131704.j9DH4Y411382@candle.pha.pa.us (view raw or flat)
Thread:
Lists: pgsql-patches
I need a comment on this.

---------------------------------------------------------------------------

Tom Lane wrote:
> BTW, it appears to me that this patch has also broken the claim in the
> manual that
> 
> 	If [krb_server_hostname is] not set, the default is to allow any
> 	service principal matching an entry in the keytab.
> 
> The reason that was true was that we passed a NULL "server" value to
> krb5_recvauth(), which with this patch we never do anymore.
> 
> I'm not sure if this represents a serious loss of flexibility or not,
> but in any case the documentation needs an update.
> 
> 			regards, tom lane
> 
> ---------------------------(end of broadcast)---------------------------
> TIP 5: don't forget to increase your free space map settings
> 

-- 
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman(at)candle(dot)pha(dot)pa(dot)us               |  (610) 359-1001
  +  If your life is a hard drive,     |  13 Roberts Road
  +  Christ can be your backup.        |  Newtown Square, Pennsylvania 19073

In response to

pgsql-patches by date

Next:From: Bruce MomjianDate: 2005-10-13 17:09:57
Subject: Re: Patch for PLPYTHONU - adding TD["relname"]
Previous:From: Bruce MomjianDate: 2005-10-13 17:04:28
Subject: Re: [HACKERS] Kerberos brokenness and oops question in 8.1beta2

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group