Horton
Menu

Re: Design Considerations for New Authentication Methods

Josh Berkus <josh@agliodbs.com>

View thread
From: Josh Berkus <josh@agliodbs.com>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: pgsql-hackers@postgresql.org, "Magnus Hagander" <mha@sollentuna.net>, mark@mark.mielke.cc, "Joshua D. Drake" <jd@commandprompt.com>, "Andrew Sullivan" <ajs@crankycanuck.ca>
Date: 2006-11-04T23:00:34Z
Lists: pgsql-hackers 
Tom,

> I have no corporate commitment to make PG 8.3+ work on ancient Red Hat
> versions, if that's what you mean.

Well, in that case my suggestion is that we plan to transition to GSSAPI and 
drop support for raw Kerberos as soon as Henry is ready with a patch (plus 
I'm going to try to get the Solaris security folks to kick in on this).  
GSSAPI is the official API of Kerberos5, and in theory supporting it should 
reduce the number of specific-library-version dependancy bugs we get with 
Kerberos in the future.

-- 
Josh Berkus
PostgreSQL @ Sun
San Francisco