Re: [BUGS] BUG #4824: KRB5/GSSAPI authentication fails when user != principal

2009-05-27 Thread Tom Lane
Magnus Hagander writes: > Magnus Hagander wrote: >> Tom Lane wrote: >>> Magnus Hagander writes: Tom, or someone else... auth.c line 1076. I'm pretty sure that should be "return ret" not "return STATUS_OK". >>> Doh. >> >> yeah. WIll apply patch. > And, applied. I have also patched the

Re: [BUGS] BUG #4824: KRB5/GSSAPI authentication fails when user != principal

2009-05-27 Thread Magnus Hagander
Magnus Hagander wrote: > Tom Lane wrote: >> Magnus Hagander writes: >>> Tom, or someone else... auth.c line 1076. I'm pretty sure that should be >>> "return ret" not "return STATUS_OK". >> Doh. > > yeah. WIll apply patch. And, applied. -- Magnus Hagander Self: http://www.hagander.net/ Work

[BUGS] BUG #4826: Cannot install Postgresql

2009-05-27 Thread Tobias Storm
The following bug has been logged online: Bug reference: 4826 Logged by: Tobias Storm Email address: tobias_st...@ofir.dk PostgreSQL version: postgresql-8.3 Operating system: Windows XP Home Edition Description:Cannot install Postgresql Details: When I am trying to

Re: [BUGS] BUG #4824: KRB5/GSSAPI authentication fails when user != principal

2009-05-27 Thread Peter Koczan
I don't know if it's much use now, but here you go. On Wed, May 27, 2009 at 3:15 PM, Magnus Hagander wrote: > We are certainly *supposed* to do that. And we have been doing that. So > if that's not done, it's been broken in 8.4 (most likely by me). > > Peter, are you using gssapi or krb5? Only kr

Re: [BUGS] BUG #4824: KRB5/GSSAPI authentication fails when user != principal

2009-05-27 Thread Magnus Hagander
Tom Lane wrote: > Magnus Hagander writes: >> Tom, or someone else... auth.c line 1076. I'm pretty sure that should be >> "return ret" not "return STATUS_OK". > > Doh. yeah. WIll apply patch. >> Wow, that's a bad bug :-O > > Hey, that's what beta is for ;-) :-) Do we need to announce it some

Re: [BUGS] BUG #4824: KRB5/GSSAPI authentication fails when user != principal

2009-05-27 Thread Tom Lane
Magnus Hagander writes: > Tom, or someone else... auth.c line 1076. I'm pretty sure that should be > "return ret" not "return STATUS_OK". Doh. > Wow, that's a bad bug :-O Hey, that's what beta is for ;-) You might want to take a quick look for copy-and-pastes of same error. I see none offhand,

Re: [BUGS] BUG #4824: KRB5/GSSAPI authentication fails when user != principal

2009-05-27 Thread Magnus Hagander
Peter Koczan wrote: > I don't know if it's much use now, but here you go. > May 27 15:37:29 mitchell postgres[30609]: [629-1] LOG: provided > username (koczan) and authenticated username (strivia) don't match > May 27 15:37:29 mitchell postgres[30609]: [630-1] LOG: connection > authorized: use

Re: [BUGS] BUG #4824: KRB5/GSSAPI authentication fails when user != principal

2009-05-27 Thread Magnus Hagander
Magnus Hagander wrote: > Tom Lane wrote: >> Peter Koczan writes: >>> This is trust authentication with one rather inconsequential bit of >>> verification, that's a fundamental breakage. One of the major points >>> of Kerberos is that, for anything that talks Kerberos, you are the >>> principal in

Re: [BUGS] BUG #4824: KRB5/GSSAPI authentication fails when user != principal

2009-05-27 Thread Magnus Hagander
Tom Lane wrote: > Peter Koczan writes: >> This is trust authentication with one rather inconsequential bit of >> verification, that's a fundamental breakage. One of the major points >> of Kerberos is that, for anything that talks Kerberos, you are the >> principal in that ticket. I understand the

Re: [BUGS] BUG #4824: KRB5/GSSAPI authentication fails when user != principal

2009-05-27 Thread Stephen Frost
* Tom Lane (t...@sss.pgh.pa.us) wrote: > Peter Koczan writes: > > This is trust authentication with one rather inconsequential bit of > > verification, that's a fundamental breakage. One of the major points > > of Kerberos is that, for anything that talks Kerberos, you are the > > principal in tha

Re: [BUGS] BUG #4824: KRB5/GSSAPI authentication fails when user != principal

2009-05-27 Thread Tom Lane
Peter Koczan writes: > This is trust authentication with one rather inconsequential bit of > verification, that's a fundamental breakage. One of the major points > of Kerberos is that, for anything that talks Kerberos, you are the > principal in that ticket. I understand the desire to change some

Re: [BUGS] BUG #4824: KRB5/GSSAPI authentication fails when user != principal

2009-05-27 Thread Peter Koczan
> We should probably at least clarify this release note.  Do you want > to make an argument that this is a fundamental breakage and we need > to revert it?  If so, what's the argument? Certainly. It seems like with the changes in 8.4, krb5/gssapi auth looks for a valid ticket, and if it finds one

[BUGS] BUG #4825: Before installation the server not running

2009-05-27 Thread Herbert Bonaffini
The following bug has been logged online: Bug reference: 4825 Logged by: Herbert Bonaffini Email address: hgsystem.m...@gmail.com PostgreSQL version: 8.3.7-1 Operating system: Windows Description:Before installation the server not running Details: Dear PostgreSQL su