How to test GSSAPI based encryption support

From: Abbas Butt <abbas(dot)butt(at)enterprisedb(dot)com>
To: pgsql-hackers(at)lists(dot)postgresql(dot)org
Subject: How to test GSSAPI based encryption support
Date: 2019-12-25 13:02:14
Message-ID: CALtH27dKo2kfZxxRx1721vRG7RSEZLz=wqPLbHJ6BgSQuL9b=w@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Hi,

I want to test GSSAPI based encryption support added via commit ID
b0b39f72b9904bcb80f97b35837ccff1578aa4b8.

I have built source --with-gssapi.
After installation I added the following line in pg_hba.conf
hostgssenc all all 172.16.214.149/24 trust
Next I ran the server and ran psql using
./psql 'host=172.16.214.149 port=5432 dbname=postgres user=abbas
gssencmode=require'
and it resulted in the following error:
psql: error: could not connect to server: GSSAPI encryption required but
was impossible (possibly no credential cache, no server support, or using a
local socket)

What steps should I follow If I want to test just the encryption support?

If GSSAPI based encryption support cannot be tested without GSSAPI
(kerberos) based authentication, then what is the purpose of having trust
as authentication method for hostgssenc connections?

Best Regards
--
*Abbas*
Architect

Ph: 92.334.5100153
Skype ID: gabbasb
www.enterprisedb.co <http://www.enterprisedb.com/>m
<http://www.enterprisedb.com/>

*Follow us on Twitter*
@EnterpriseDB

Visit EnterpriseDB for tutorials, webinars, whitepapers
<http://www.enterprisedb.com/resources-community> and more
<http://www.enterprisedb.com/resources-community>

Browse pgsql-hackers by date

  From Date Subject
Next Message Alexey Kondratov 2019-12-25 13:51:57 Re: Physical replication slot advance is not persistent
Previous Message Fujii Masao 2019-12-25 13:00:36 Add pg_file_sync() to adminpack