Re: [PATCH v20] GSSAPI encryption support
Stephen Frost <sfrost@snowman.net>
From: Stephen Frost <sfrost@snowman.net>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>, Alvaro Herrera <alvherre@2ndquadrant.com>, David Steele <david@pgmasters.net>, Joe Conway <mail@joeconway.com>, Magnus Hagander <magnus@hagander.net>, Michael Paquier <michael@paquier.xyz>, Nico Williams <nico@cryptonector.com>, PostgreSQL-development <pgsql-hackers@postgresql.org>, Robbie Harwood <rharwood@redhat.com>
Date: 2019-04-04T14:48:19Z
Lists: pgsql-hackers
Greetings, * Tom Lane (tgl@sss.pgh.pa.us) wrote: > Stephen Frost <sfrost@snowman.net> writes: > > On Thu, Apr 4, 2019 at 05:20 Peter Eisentraut < > > peter.eisentraut@2ndquadrant.com> wrote: > >> Kerberos tests are now failing for me (macOS). > > > Interesting, they work locally for me on Ubuntu. Unfortunately, I don’t > > have macOS. This only happens when encryption is being used, presumably? > > GSS authentication is still working fine? > > The kerberos test suite passes for me on RHEL6 (kerberos 1.10.3), > but I observe some compiler warnings that need to be dealt with: Interesting, I don't see those with my build. I'll have to figure out why not. Will fix them in any case. > $ ./configure --with-gssapi ... > $ time make -j8 -s > be-secure-gssapi.c:597: warning: no previous prototype for 'be_gssapi_get_auth' > be-secure-gssapi.c:609: warning: no previous prototype for 'be_gssapi_get_enc' > be-secure-gssapi.c:621: warning: no previous prototype for 'be_gssapi_get_princ' > pgstat.c: In function 'pgstat_bestart': > pgstat.c:2986: warning: implicit declaration of function 'be_gssapi_get_auth' > pgstat.c:2987: warning: implicit declaration of function 'be_gssapi_get_enc' > pgstat.c:2990: warning: implicit declaration of function 'be_gssapi_get_princ' > pgstat.c:2990: warning: passing argument 2 of 'strlcpy' makes pointer from integer without a cast > ../../../src/include/port.h:429: note: expected 'const char *' but argument is of type 'int' > All of PostgreSQL successfully made. Ready to install. > > I'm not very sure why the integer/pointer confusion in pgstat_bestart > doesn't cause hard crashes when using gss auth --- or does > this suite not actually test that? Isn't it just saying that because of the implicit declaration..? Once that's fixed, the integer/pointer warning will go away, but it's actually a pointer in either case, hence why it isn't crashing. The test suite does test GSS authentication and GSS encryption. Thanks, Stephen
Commits
-
GSSAPI encryption support
- b0b39f72b990 12.0 landed
-
Fix typo
- 57c932475504 9.6.0 cited