Re: BUG #13854: SSPI authentication failure: wrong realm name used

* From: Tom Lane [mailto:tgl(at)sss(dot)pgh(dot)pa(dot)us]

> chris(at)chrullrich(dot)net writes:

> > According to the release notes, the default for the "include_realm"
> > option in SSPI authentication was changed from off to on in 9.5 for
> > improved security. However, the authenticated user name, with the
> > option enabled, now includes the NetBIOS domain name, *not* the
> > Kerberos realm name:

> Is this new breakage, or did include_realm=1 fail in the same way for
> your configuration in prior releases?

s/now includes/includes/

I did not use that option before, the same as everyone else, but I checked
9.4.5 just now and it fails in the same way there. The code in auth.c has
not changed significantly since it was introduced, so I assume that it
has behaved like this from the start.

--
Christian