Re: Future of krb5 authentication

From: "Joshua D(dot) Drake" <jd(at)commandprompt(dot)com>
To: Dave Page <dpage(at)postgresql(dot)org>
Cc: Andrew Dunstan <andrew(at)dunslane(dot)net>, Magnus Hagander <magnus(at)hagander(dot)net>, Heikki Linnakangas <heikki(at)enterprisedb(dot)com>, pgsql-hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Future of krb5 authentication
Date: 2007-07-18 15:49:25
Message-ID: 469E3685.8080900@commandprompt.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Joshua D. Drake wrote:
> Dave Page wrote:
>> Andrew Dunstan wrote:
>>>
>>>
>>> Dave Page wrote:
>>>> Magnus Hagander wrote:
>>>>>> libpq would still work against older server versions, right?
>>>>>
>>>>> Not once krb5 is removed. Assuming the older server version used
>>>>> krb5 auth.
>>>>
>>>> OK, well thats a problem. pgAdmin supports back to 7.3...
>>>>
>>>>
>>>
>>> I think you need to put forward an alternative plan, then. Asking us
>>> to wait until your oldest version is 8.4 before we rip it out of
>>> libpq doesn't sound too good.
>>
>> pgAdmin was just one example. This prevents anyone with kerberos5 in a
>> similar situation upgrading their client libraries - including users
>> of the myriad of apps that use psqlODBC.
>
> Who likely don't use kerberos.

I would also note that Magnus's proposal means that krb5 won't be
removed for *at least* 2 years. I think that is plenty of time for an
EOL cycle on a feature.

Joshua D. Drake

>
> Joshua D. Drake
>
>>
>> Regards, Dave
>>
>> ---------------------------(end of broadcast)---------------------------
>> TIP 7: You can help support the PostgreSQL project by donating at
>>
>> http://www.postgresql.org/about/donate
>>
>
>
> ---------------------------(end of broadcast)---------------------------
> TIP 3: Have you checked our extensive FAQ?
>
> http://www.postgresql.org/docs/faq
>

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Gregory Stark 2007-07-18 16:06:05 Re: Future of krb5 authentication
Previous Message Tom Lane 2007-07-18 15:27:14 Re: Future of krb5 authentication