| From: | Peter Eisentraut <peter(dot)eisentraut(at)2ndquadrant(dot)com> |
|---|---|
| To: | Stephen Frost <sfrost(at)snowman(dot)net> |
| Cc: | Magnus Hagander <magnus(at)hagander(dot)net>, Joe Conway <mail(at)joeconway(dot)com>, Alvaro Herrera <alvherre(at)2ndquadrant(dot)com>, David Steele <david(at)pgmasters(dot)net>, Michael Paquier <michael(at)paquier(dot)xyz>, Nico Williams <nico(at)cryptonector(dot)com>, Robbie Harwood <rharwood(at)redhat(dot)com>, PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org> |
| Subject: | Re: [PATCH v20] GSSAPI encryption support |
| Date: | 2019-04-05 20:41:54 |
| Message-ID: | f56cacac-0693-23aa-353d-179adbe32f2e@2ndquadrant.com |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
On 2019-04-05 14:48, Stephen Frost wrote:
> All of it was built against the OS-provided Kerberos install, and you
> got the failure..?
right
> On a failure to set up an encrypted connection, we'll actually fall back
> to a non-encrypted one using GSSAPI *just* for authentication, which is> why I was asking if this worked before the encryption patch went in.
The tests have always worked before. I've run them probably hundreds of
times.
> Also, which of the tests are still failing, exactly? The authentication
> ones or the encryption ones or both?
Only the encryption ones:
not ok 1 - GSS-encrypted access
# Failed test 'GSS-encrypted access'
# at t/002_enc.pl line 170.
# got: '2'
# expected: '0'
ok 2 - GSS encryption disabled
not ok 3 - GSS encryption without auth
# Failed test 'GSS encryption without auth'
# at t/002_enc.pl line 170.
# got: '2'
# expected: '0'
not ok 4 - GSS unencrypted fallback
# Failed test 'GSS unencrypted fallback'
# at t/002_enc.pl line 170.
# got: '2'
# expected: '0'
ok 5 - GSS unencrypted fallback prevention
--
Peter Eisentraut http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Peter Eisentraut | 2019-04-05 20:46:28 | Re: monitoring CREATE INDEX [CONCURRENTLY] |
| Previous Message | Andres Freund | 2019-04-05 20:25:38 | Status of the table access method work |