Re: --with-gssapi requiring MIT Kerberos

From: Stephen Frost <sfrost(at)snowman(dot)net>
To: buildfarm-members(at)postgresql(dot)org
Subject: Re: --with-gssapi requiring MIT Kerberos
Date: 2023-04-13 13:01:20
Message-ID: ZDf9IOBrAKsxV5Y7@tamriel.snowman.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: buildfarm-members

Greetings buildfarm-members,

* Stephen Frost (sfrost(at)snowman(dot)net) wrote:
> While it hasn't gone in quite yet, the plan is to start requiring MIT
> Kerberos with the Kerberos credential delegation support. I anticipate
> committing that later today or perhaps tomorrow.

This change has now been committed.

> What this means for buildfarm members is that if you currently have
> --with-gssapi enabled, you'll need to make sure that you have MIT
> Kerberos installed. This is generally available as 'krb5' on most
> platforms (libkrb5-dev on Ubuntu/Debian is the development package, on
> FreeBSD it's the krb5 package, for example).
>
> Additionally, if your buildfarm system has the resources for it and the
> localhost network is secure, it'd be great if you would consider
> enabling the Kerberos tests in PG_TEST_EXTRA. This requires having the
> MIT KDC and Kerberos client packages installed also, but we are then
> able to actually do a full test of the Kerberos system.

Any questions, please feel free to ask.

Thanks!

Stephen

In response to

Browse buildfarm-members by date

  From Date Subject
Next Message Jeff Davis 2023-04-17 18:00:15 Re: Non-ICU buildfarm members, please use --without-icu
Previous Message Stephen Frost 2023-04-12 16:18:59 --with-gssapi requiring MIT Kerberos