Re: BUG #4932: Upgrade 8.2.13 -> 8.4.0 - Kerberos option missing

From: Magnus Hagander <magnus(at)hagander(dot)net>
To: Peter Much <pmc(at)citylink(dot)dinoex(dot)sub(dot)org>
Cc: pgsql-bugs(at)postgresql(dot)org
Subject: Re: BUG #4932: Upgrade 8.2.13 -> 8.4.0 - Kerberos option missing
Date: 2009-07-22 09:52:32
Message-ID: 9837222c0907220252y66fecb1aw680664cad8682af9@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

On Wed, Jul 22, 2009 at 11:42, Peter Much<pmc(at)citylink(dot)dinoex(dot)sub(dot)org> wrote:
>
> The following bug has been logged online:
>
> Bug reference:      4932
> Logged by:          Peter Much
> Email address:      pmc(at)citylink(dot)dinoex(dot)sub(dot)org
> PostgreSQL version: 8.4.0
> Operating system:   FreeBSD 7.2
> Description:        Upgrade 8.2.13 -> 8.4.0 - Kerberos option missing
> Details:
>
> In chapter 19.3.5 of the manual an option "krb_server_hostname" is
> mentioned.
> This option was present in 8.2 but is no longer present in 8.4.0

It is present, only it has now been moved to pg_hba.conf. It is no
longer in postgresql.conf. My guess is that you tried it configured
the same way as in previous versions, where there was a global
parameter in postgresql.conf?

> So at least we have a documentation bug here.

That page lists settings for pg_hba.conf, so I believe it is correct.
However, suggestions for improvements are always welcome :-)

> But the essential point seems to me the following: section 19.3.5 of the
> manual reads "hostname is the fully qualified host name of the server
> machine."
>
> But _there_is_no_such_thing_ as a "fully qualified hostname"!
> There are only _fully_qualified_interface-names_, and any host can have
> *many* of these. The hostname itself is nothing else than an arbitrary label
> for the machine, and it should never be used by networking software.

In a very large part of the cases, the fully qualified hostname will
be the same as the fully qualified interface name for the only
interface that's configured.

Anyway, the whole reason for moving the krb_server_hostname parameter
into pg_hba.conf is to make it *more* flexible to configure situations
like this.

--
Magnus Hagander
Self: http://www.hagander.net/
Work: http://www.redpill-linpro.com/

In response to

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message Peter Much 2009-07-22 15:29:50 Re: BUG #4932: Upgrade 8.2.13 -> 8.4.0 - Kerberos option missing
Previous Message Peter Much 2009-07-22 09:42:51 BUG #4932: Upgrade 8.2.13 -> 8.4.0 - Kerberos option missing