Re: GSSAPI doesn't play nice with non-canonical host names

From: Magnus Hagander <magnus(at)hagander(dot)net>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, pgsql-hackers(at)postgreSQL(dot)org
Subject: Re: GSSAPI doesn't play nice with non-canonical host names
Date: 2008-01-28 13:25:10
Message-ID: 20080128132510.GE26468@svr2.hagander.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Sun, Jan 27, 2008 at 09:32:54PM -0500, Stephen Frost wrote:
>
> > While I'm complaining: that's got to be one of the least useful error
> > messages I've ever seen, and it's for a case that's surely going to be
> > fairly common in practice. Can't we persuade GSSAPI to produce
> > something more user-friendly? At least convert "7" to "Server not
> > found in Kerberos database"?
>
> I agree, and have found it to be very frustrating while working w/
> Kerberos in general. I *think* there's a library which can convert
> those error-codes (libcomm-err?), but I've not really looked into it
> yet.

AFAIK, that one is for Kerberos only. For GSSAPI, we already use the
gss_display_status function to get the error messages. I think the problem
here is in the Kerberos library?

//Magnus

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Jonah H. Harris 2008-01-28 13:51:30 Re: [PATCHES] Including Snapshot Info with Indexes
Previous Message Gokulakannan Somasundaram 2008-01-28 13:21:57 Re: [HACKERS] Including Snapshot Info with Indexes