Skip site navigation (1) Skip section navigation (2)

Re: Patch to add Heimdal kerberos support

From: Peter Eisentraut <peter_e(at)gmx(dot)net>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: Bill Studenmund <wrstuden(at)netbsd(dot)org>, <pgsql-patches(at)postgresql(dot)org>
Subject: Re: Patch to add Heimdal kerberos support
Date: 2001-11-14 16:24:09
Message-ID: Pine.LNX.4.30.0111141653170.639-100000@peter.localdomain (view raw or flat)
Thread:
Lists: pgsql-patches
Tom Lane writes:

> It also seems that our present code may be using some long-deprecated
> Kerberos APIs --- for example, the krb5_recvauth man pages I can find on
> the net describe several more parameters than our code is expecting to
> pass.

No idea about the deprecatedness, but our Kerberos code does compile with
the Kerberos V shipped in Red Hat 7.0 (MIT, I think), and the Kerberos IV
code compiled successfully with KTH Kerberos last time I checked.

However, most of the three people that ever mentioned anything detailed
about the Kerberos support in PostgreSQL had the sound of "fundementally
flawed", "totally insecure", etc.

-- 
Peter Eisentraut   peter_e(at)gmx(dot)net


In response to

Responses

pgsql-patches by date

Next:From: Peter EisentrautDate: 2001-11-14 16:24:38
Subject: Re: Patch to add Heimdal kerberos support
Previous:From: Bill StudenmundDate: 2001-11-14 07:19:56
Subject: Re: Patch to add Heimdal kerberos support

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group