From: | Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> |
---|---|
To: | Sean Chittenden <sean(at)chittenden(dot)org> |
Cc: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Joe Conway <mail(at)joeconway(dot)com>, "Hackers (PostgreSQL)" <pgsql-hackers(at)postgresql(dot)org> |
Subject: | Re: compile error on cvs tip |
Date: | 2003-08-16 23:33:34 |
Message-ID: | 200308162333.h7GNXYf12114@candle.pha.pa.us |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-hackers |
Sean Chittenden wrote:
> > > auth.c: In function `pg_krb5_recvauth':
> > > auth.c:294: structure has no member named `user'
> >
> > Ooops, my fault --- I didn't build with Kerberos support after
> > changing those field names.
> >
> > Now that I think about it, there might be similar omissions in the
> > PAM or Kerberos4 support --- can anyone try those?
>
> krb4 code should be removed from PostgreSQL ASAP for various
> insecurities in the protocol. It's been removed from FreeBSD, MIT,
> and Heimdal's code base and is officially unsupported as of June this
> year. -sc
I have added the following to our documentation in the Kerberos section:
<para>
While <productname>PostgreSQL</> supports both Kerberos 4 and
Kerberos 5, only Kerberos 5 is recommended. Kerberos 4 is
considered insecure and no longer recommended for general
use.
</para>
--
Bruce Momjian | http://candle.pha.pa.us
pgman(at)candle(dot)pha(dot)pa(dot)us | (610) 359-1001
+ If your life is a hard drive, | 13 Roberts Road
+ Christ can be your backup. | Newtown Square, Pennsylvania 19073
From | Date | Subject | |
---|---|---|---|
Next Message | Bruce Momjian | 2003-08-16 23:53:36 | Re: Error message style guide, take 2 |
Previous Message | Bruce Momjian | 2003-08-16 23:22:47 | Re: [HACKERS] Are we losing momentum? |