Re: [HACKERS] 8.3 GSS Issues

2007-10-27 Thread Henry B. Hotz
On Oct 27, 2007, at 1:36 AM, Magnus Hagander wrote: If this isn't fixed then PG will never be a supported infrastructure service at JPL the way MySQL currently is. I had hoped to use the GSSAPI support as a feature to pry some people away from MySQL, but without the ability to integrate into a

Re: [HACKERS] 8.3 GSS Issues

2007-10-27 Thread Magnus Hagander
Henry B. Hotz wrote: > What the krb5 method does is IMO a documented bug. The realm name > is part of the name. > > As I explained at some length you cannot assume the username (first > component of the principal) has any meaning by itself, except in > small deployments wit

Re: [HACKERS] 8.3 GSS Issues

2007-10-26 Thread Henry B. Hotz
On Oct 26, 2007, at 12:56 AM, Magnus Hagander wrote: On Thu, Oct 25, 2007 at 05:39:37PM -0700, Henry B. Hotz wrote: On Oct 25, 2007, at 3:27 PM, Stephen Frost wrote: * Henry B. Hotz ([EMAIL PROTECTED]) wrote: What you're asking for is basically a krb_match_realm parameter, or do I under

Re: [HACKERS] 8.3 GSS Issues

2007-10-26 Thread Magnus Hagander
On Thu, Oct 25, 2007 at 05:39:37PM -0700, Henry B. Hotz wrote: > > On Oct 25, 2007, at 3:27 PM, Stephen Frost wrote: > > >* Henry B. Hotz ([EMAIL PROTECTED]) wrote: > >What you're asking for is basically a krb_match_realm parameter, or > >do I > >understand you wrong? > > I'm asking for name mat

Re: [HACKERS] 8.3 GSS Issues

2007-10-25 Thread Henry B. Hotz
On Oct 25, 2007, at 3:27 PM, Stephen Frost wrote: * Henry B. Hotz ([EMAIL PROTECTED]) wrote: What the krb5 method does is IMO a documented bug. The realm name is part of the name. As I explained at some length you cannot assume the username (first component of the principal) has any meanin

Re: [HACKERS] 8.3 GSS Issues

2007-10-25 Thread Stephen Frost
* Henry B. Hotz ([EMAIL PROTECTED]) wrote: > What the krb5 method does is IMO a documented bug. The realm name is part > of the name. > > As I explained at some length you cannot assume the username (first > component of the principal) has any meaning by itself, except in small > deployments wi

Re: [HACKERS] 8.3 GSS Issues

2007-10-25 Thread Henry B. Hotz
On Oct 25, 2007, at 1:47 AM, Magnus Hagander wrote: On Fri, Oct 19, 2007 at 04:51:04PM -0700, Henry B. Hotz wrote: I know I haven't been very active for a while here, but I just got to testing the October 3 version a bit prior to getting back to the Java GSS client stuff I promised. There see

Re: [HACKERS] 8.3 GSS Issues

2007-10-25 Thread Henry B. Hotz
On Oct 25, 2007, at 10:22 AM, Tom Lane wrote: Magnus Hagander <[EMAIL PROTECTED]> writes: On Fri, Oct 19, 2007 at 04:51:04PM -0700, Henry B. Hotz wrote: There's no way to specify the gssapi library to use. I have three on my main development Sun: MIT, Sun, and Heimdal. I might have more

Re: [HACKERS] 8.3 GSS Issues

2007-10-25 Thread Tom Lane
Magnus Hagander <[EMAIL PROTECTED]> writes: > On Fri, Oct 19, 2007 at 04:51:04PM -0700, Henry B. Hotz wrote: >> There's no way to specify the gssapi library to use. I have three on >> my main development Sun: MIT, Sun, and Heimdal. I might have more >> than one version of one of those three

Re: [HACKERS] 8.3 GSS Issues

2007-10-25 Thread Magnus Hagander
On Thu, Oct 25, 2007 at 09:26:47AM -0300, Alvaro Herrera wrote: > Magnus Hagander wrote: > > On Fri, Oct 19, 2007 at 04:51:04PM -0700, Henry B. Hotz wrote: > > > > At the risk of diluting my message: I still think it's a mistake to > > > call it gss instead of something like gss-noprot. I beli

Re: [HACKERS] 8.3 GSS Issues

2007-10-25 Thread Alvaro Herrera
Magnus Hagander wrote: > On Fri, Oct 19, 2007 at 04:51:04PM -0700, Henry B. Hotz wrote: > > At the risk of diluting my message: I still think it's a mistake to > > call it gss instead of something like gss-noprot. I believe this > > will cause misunderstandings in the future when we get the

Re: [HACKERS] 8.3 GSS Issues

2007-10-25 Thread Magnus Hagander
On Fri, Oct 19, 2007 at 04:51:04PM -0700, Henry B. Hotz wrote: > I know I haven't been very active for a while here, but I just got to > testing the October 3 version a bit prior to getting back to the Java > GSS client stuff I promised. There seem to be some funny things there. Apologies for

Re: [HACKERS] 8.3 GSS Issues

2007-10-20 Thread Bruce Momjian
Sorry, wrong email. Nothing applied. --- Henry B. Hotz wrote: > I know I haven't been very active for a while here, but I just got to > testing the October 3 version a bit prior to getting back to the Java > GSS client

Re: [HACKERS] 8.3 GSS Issues

2007-10-20 Thread Bruce Momjian
Patch applied. Thanks. --- Henry B. Hotz wrote: > I know I haven't been very active for a while here, but I just got to > testing the October 3 version a bit prior to getting back to the Java > GSS client stuff I promi