| From: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
|---|---|
| To: | chris(at)chrullrich(dot)net |
| Cc: | pgsql-bugs(at)postgresql(dot)org |
| Subject: | Re: BUG #13854: SSPI authentication failure: wrong realm name used |
| Date: | 2016-01-08 00:53:21 |
| Message-ID: | 25002.1452214401@sss.pgh.pa.us |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-bugs pgsql-hackers |
chris(at)chrullrich(dot)net writes:
> According to the release notes, the default for the "include_realm" option
> in SSPI authentication was changed from off to on in 9.5 for improved
> security. However, the authenticated user name, with the option enabled, now
> includes the NetBIOS domain name, *not* the Kerberos realm name:
Is this new breakage, or did include_realm=1 fail in the same way for
your configuration in prior releases?
regards, tom lane
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Christian Ullrich | 2016-01-08 00:59:02 | Re: BUG #13854: SSPI authentication failure: wrong realm name used |
| Previous Message | chris | 2016-01-08 00:25:26 | BUG #13854: SSPI authentication failure: wrong realm name used |
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Christian Ullrich | 2016-01-08 00:59:02 | Re: BUG #13854: SSPI authentication failure: wrong realm name used |
| Previous Message | Jim Nasby | 2016-01-08 00:33:51 | BEGINNER HACKERS: array_remove(anyarray, anyarray) |