Re: [PATCH v19] GSSAPI encryption support

From: Robbie Harwood <rharwood(at)redhat(dot)com>
To: Stephen Frost <sfrost(at)snowman(dot)net>
Cc: Dmitry Dolgov <9erthalion6(at)gmail(dot)com>, Michael Paquier <michael(at)paquier(dot)xyz>, Heikki Linnakangas <hlinnaka(at)iki(dot)fi>, PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>, nico(at)cryptonector(dot)com
Subject: Re: [PATCH v19] GSSAPI encryption support
Date: 2018-12-04 23:46:53
Message-ID: jlgsgzc26tu.fsf@redhat.com
Views: Raw Message | Whole Thread | Download mbox
Thread:
Lists: pgsql-hackers

Stephen Frost <sfrost(at)snowman(dot)net> writes:

> Greetings Robbie,
>
> * Dmitry Dolgov (9erthalion6(at)gmail(dot)com) wrote:
>> > On Tue, Oct 2, 2018 at 11:12 PM Robbie Harwood <rharwood(at)redhat(dot)com> wrote:
>> >
>> > Michael Paquier <michael(at)paquier(dot)xyz> writes:
>> >
>> > > On Mon, Aug 06, 2018 at 05:23:28PM -0400, Robbie Harwood wrote:
>> > >> If you're in a position where you're using Kerberos (or most other
>> > >> things from the GSSAPI) for authentication, the encryption comes at
>> > >> little to no additional setup cost. And then you get all the security
>> > >> benefits outlined in the docs changes.
>> > >
>> > > Please note that the last patch set does not apply anymore, so I have
>> > > moved it to CF 2018-11 and marked it as waiting on author.
>> >
>> > Indeed. Please find v19 attached. It's just a rebase; no architecture
>> > changes.
>>
>> Unfortunately, patch needs another rebase, could you do this? In the meantime
>> I'll move it to the next CF.
>
> This patch needs a few minor changes to get it back to working, but I'm
> happy to say that with those changes, it seems to be working rather well
> for me.

Thanks Stephen!

Dmitry, I will make an update (and address Stephen's feedback) hopefully
soon.

Thanks,
--Robbie

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Michael Paquier 2018-12-05 01:16:33 Re: psql display of foreign keys
Previous Message Nikita Glukhov 2018-12-04 23:10:04 Re: SQL/JSON: JSON_TABLE