Re: PATCH: Add GSSAPI ccache_name option to libpq

2021-04-21 Thread Daniel Carter
Hi Stephen, On 21/04/2021 18:40, Stephen Frost wrote: I surely hope that the intent here is to use Negotiate / SPNEGO to authenticate the user who is connecting to the webserver and then have credentials delegated (ideally through constrained credential delegation..) to the web server by the use

Re: PATCH: Add GSSAPI ccache_name option to libpq

2021-04-20 Thread Daniel Carter
Hi Stephen, On 20/04/2021 20:01, Stephen Frost wrote: I'm not necessarily against this, but typically the GSSAPI library provides a way for you to control this using, eg, the KRB5_CCACHE environment variable. Is there some reason why that couldn't be used..? The original motivation for invest

Re: PATCH: Add GSSAPI ccache_name option to libpq

2021-04-20 Thread Daniel Carter
Hi Aleksander, On 20/04/2021 11:30, Aleksander Alekseev wrote: Hi Daniel, It's my first go at submitting a patch -- it works as far as I can tell, but I suspect there will probably still be stuff to fix before it's ready to use! You are doing great :) Thanks for the encouragement! There

PATCH: Add GSSAPI ccache_name option to libpq

2021-04-20 Thread Daniel Carter
Hi, This is a small patch (against master) to allow an application using libpq with GSSAPI authentication to specify where to fetch the credential cache from -- it effectively consists of a new field in PQconninfoOptions to store this data and (where the user has specified a ccache location)