Re: [PATCH v20] GSSAPI encryption support
Tom Lane <tgl@sss.pgh.pa.us>
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Cc: Stephen Frost <sfrost@snowman.net>, Magnus Hagander <magnus@hagander.net>,
Joe Conway <mail@joeconway.com>,
Alvaro Herrera <alvherre@2ndquadrant.com>,
David Steele <david@pgmasters.net>,
Michael Paquier <michael@paquier.xyz>,
Nico Williams <nico@cryptonector.com>,
Robbie Harwood <rharwood@redhat.com>,
PostgreSQL-development <pgsql-hackers@postgresql.org>
Date: 2019-04-09T04:11:05Z
Lists: pgsql-hackers
Peter Eisentraut <peter.eisentraut@2ndquadrant.com> writes: > On 2019-04-05 23:37, Stephen Frost wrote: >> I've also reached out to some colleagues about having one of them test >> with MacOS. What version are you on..? > macOS 10.14.14 it says. I tried to replicate this on my own laptop (macOS 10.14.4 ... I do not think there is or ever will be a 10.14.14). I can't, because the kerberos test fails immediately: 1..4 # setting up Kerberos # Running: krb5-config --version # Running: kdb5_util create -s -P secret0 Can't exec "kdb5_util": No such file or directory at /Users/tgl/pgsql/src/test/kerberos/../../../src/test/perl/TestLib.pm line 190. Bail out! system kdb5_util failed and indeed, there's no kdb5_util in /usr/bin/ or anywhere else that I can find. So I speculate that Peter is running some weird hodgepodge of Apple and Homebrew code, making the question not so much "why does it fail" as "how did it ever work". I also notice that the build spews out a bunch of deprecation warnings, because just as with openSSL, Apple has stuck deprecation attributes on everything in gssapi/gssapi.h. They want you to use their GSS "framework" instead. So I'm not convinced we should spend a lot of effort on fooling with the test scripts for this. This platform has got much more fundamental problems than that. regards, tom lane
Commits
-
GSSAPI encryption support
- b0b39f72b990 12.0 landed
-
Fix typo
- 57c932475504 9.6.0 cited