Re: [HACKERS] Kerberos brokenness and oops question in 8.1beta2

From: "Magnus Hagander" <mha(at)sollentuna(dot)net>
To: "Bruce Momjian" <pgman(at)candle(dot)pha(dot)pa(dot)us>
Cc: "Tom Lane" <tgl(at)sss(dot)pgh(dot)pa(dot)us>, "PostgreSQL-patches" <pgsql-patches(at)postgresql(dot)org>, <kovert(at)omniscient(dot)com>
Subject: Re: [HACKERS] Kerberos brokenness and oops question in 8.1beta2
Date: 2005-10-15 15:46:07
Message-ID: 6BCB9D8A16AC4241919521715F4D8BCE92E744@algol.sollentuna.se
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-patches

> > Previously, we set pg_krb5_server to NULL, which is something
> > completely different than pg_krb_srvname=NULL (yes, they are named
> > very closely, but they are completely different things).
> > krb5_sname_to_principal() was never called.
> >
> > This is what wasn't working for me.
> >
> > > I have applied the following patch which updates the
> documentation
> > > to reflect 'localhost', and improves the error message to always
> > > print the server name as well as the service name. (We have had
> > > complaints about poor Kerberos error messages before.)
> >
> > This is not correct.
> > The default is *not* "localhost". It's the "local host name". As in
> > what's returned by gethostname().
>
> Ah, local host name, not localhost. Poor wording. Text updated:
>
> If not set, the default is the server hostname. See <xref
> linkend="kerberos-auth"> for details. This parameter
> can only be set at
> server start.

I htink you need to update the .c file as well - you changed a message
there to read "localhost" last time around.

//Magnus

Browse pgsql-patches by date

  From Date Subject
Next Message Neil Conway 2005-10-15 20:16:43 Re: Documentation typos
Previous Message Tom Lane 2005-10-15 15:45:49 Re: [HACKERS] Kerberos brokenness and oops question in 8.1beta2