Re: gssenc supported?

Hi

On Tue, 21 Jan 2025 at 16:51, Troels Arvin <troels(at)arvin(dot)dk> wrote:

> Hello,
>
> Khushboo Vashi wrote:
> > Have you tried connecting Postgres Server with PSQL?
>
> Yes, I've tried the psql.exe which is shippe with pgadmin. And I've
> tried psql.exe from the latest Windows installer from
> https://www.enterprisedb.com/downloads/postgres-postgresql-downloads
>
> Both work when having hostnogssenc in pg_hba.conf. But both do not work
> when hostgssenc is used in pg_hba.conf.
>
> Does someone know why those binaries are not compiled with support for
> hostgssenc?
>

We don't build the binaries that we ship with pgAdmin on Windows with
GSSAPI support, for a couple of reasons. First, there's actually a
long-standing bug [1] in PostgreSQL that prevents compilation on Windows
with both MIT Kerberos and OpenSSL together (I've tried multiple
backchannels to get that fix committed - please feel free to chime in on
the thread). Secondly, people almost exclusively use SSPI on Windows. You
are actually the first person I recall ever wanting GSSAPI support.

FWIW, we ship MIT Kerberos anyway (for handling app logins). Adding GSSAPI
support would be trivial, if the upstream bug were fixed.

[1]
https://www.postgresql.org/message-id/flat/CA%2BOCxoxwsgi8QdzN8A0OPGuGfu_1vEW3ufVBnbwd3gfawVpsXw%40mail.gmail.com

--
Dave Page
pgAdmin: https://www.pgadmin.org
PostgreSQL: https://www.postgresql.org
pgEdge: https://www.pgedge.com