Re: longfin missing gssapi_ext.h
Tom Lane <tgl@sss.pgh.pa.us>
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Stephen Frost <sfrost@snowman.net>
Cc: pgsql-hackers@lists.postgresql.org
Date: 2023-04-08T18:40:38Z
Lists: pgsql-hackers
I wrote: > * NetBSD's package collection[1] includes both Heimdal and MIT Kerberos > (mit-krb5). Apparently what's installed on at least some of the buildfarm > animals is the former. Oh! New data: the core NetBSD OS includes a copy of Heimdal (looks to be 7.7.0 in the 10.0_BETA sources). The installable package is a slightly newer version, 7.8.0, but I think it's a very solid bet that the relevant buildfarm animals are just using the core copy and haven't installed the add-on package. Even if they had, it would take some fooling around with include and link paths to pull in the packaged version rather than the built-in one. The exact same thing applies to FreeBSD, except that their in-core Heimdal is ancient (1.5.2). Also, they do have MIT Kerberos available as a package [1]. I'd been misled by the lack of a hit on "kerberos", but "krb5" finds it. Our code does compile against that version of Heimdal, but src/test/kerberos/ refuses to try to run. I've not dug into OpenBSD any further. regards, tom lane [1] https://ports.freebsd.org/cgi/ports.cgi?query=krb5&stype=all&sektion=all
Commits
-
Further cleanup of autoconf output files for GSSAPI changes.
- d48ac0070cff 16.0 landed
-
Update Kerberos/GSSAPI configure/meson check
- 1c52f9c042fb 16.0 landed
-
Explicitly require MIT Kerberos for GSSAPI
- f7431bca8b01 16.0 landed
-
De-Revert "Add support for Kerberos credential delegation"
- 6633cfb21691 16.0 landed
-
Revert "Add support for Kerberos credential delegation"
- 3d03b24c350a 16.0 landed