Re: [PoC] Federated Authn/z with OAUTHBEARER

From: Jacob Champion <jacob(dot)champion(at)enterprisedb(dot)com>
To: Antonin Houska <ah(at)cybertec(dot)at>
Cc: Daniel Gustafsson <daniel(at)yesql(dot)se>, Peter Eisentraut <peter(at)eisentraut(dot)org>, PostgreSQL Hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: [PoC] Federated Authn/z with OAUTHBEARER
Date: 2024-11-05 23:39:43
Message-ID: CAOYmi+k6055LA2nsnL0ZUqX5gSYVc=fck3+meOnYCCXwg-wckA@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Tue, Nov 5, 2024 at 3:33 PM Jacob Champion
<jacob(dot)champion(at)enterprisedb(dot)com> wrote:
> Done in v36, attached.

Forgot to draw attention to this part:

> +# XXX libcurl must link after libgssapi_krb5 on FreeBSD to avoid segfaults
> +# during gss_acquire_cred(). This is possibly related to Curl's Heimdal
> +# dependency on that platform?

Best I can tell, libpq for FreeBSD has a dependency diamond for GSS
symbols: libpq links against MIT krb5, libcurl links against Heimdal,
libpq links against libcurl. Link order becomes critical to avoid
nasty segfaults, but I have not dug deeply into the root cause.

--Jacob

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Michael Paquier 2024-11-05 23:57:20 Re: Time to add a Git .mailmap?
Previous Message Michael Paquier 2024-11-05 23:39:07 Re: per backend I/O statistics