kerberos regression test enhancement

From: David Zhang <david(dot)zhang(at)highgo(dot)ca>
To: pgsql-hackers(at)postgresql(dot)org
Subject: kerberos regression test enhancement
Date: 2020-03-05 20:53:22
Message-ID: 8808bcd2-22e0-6faa-dc2a-44478b4813eb@highgo.ca
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Hi Hackers,

I found one interesting behavior when "--with-gssapi" is enabled,

given a very "common" configuration in gp_hba.conf like below,

    host            postgres    david   192.168.0.114/32    trust

the query message is always encrypted when using a very "common" way
connect to PG server,

    $ psql -h pgserver -d postgres -U david

unless I specify "gssencmode=disable" with -d option,

    $ psql -h pgserver -U david  -d "dbname=postgres gssencmode=disable"

Based on above behaviors, I did a further exercise on kerberos
regression test and found the test coverage is not enough. It should be
enhanced to cover the above behavior when user specified a "host"
followed by "trust" access in pg_hba.conf.

the attachment is a patch to cover the behaviors mentioned above for
kerberos regression test.

Any thoughts?

Thanks,

--
David

Software Engineer
Highgo Software Inc. (Canada)
www.highgo.ca

Attachment Content-Type Size
001_auth.pl-host-trust.patch text/plain 1.0 KB

Browse pgsql-hackers by date

  From Date Subject
Next Message Tom Lane 2020-03-05 20:57:00 Re: Retiring support for pre-7.3 FK constraint triggers
Previous Message Tom Lane 2020-03-05 20:52:43 Re: Retiring support for pre-7.3 FK constraint triggers