BUG #16320: GSSAPI Error

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
7 messages Options
Reply | Threaded
Open this post in threaded view
|

BUG #16320: GSSAPI Error

apt.postgresql.org Repository Update
The following bug has been logged on the website:

Bug reference:      16320
Logged by:          Kinjal Brahmbhatt
Email address:      [hidden email]
PostgreSQL version: 12.2
Operating system:   Mac
Description:        

Hello, i tried to uninstall and reinstall the Postgresql multiple times, but
every time i go to enter my password, it gives me a GSSAPI error.

Please advise.

Thank you,
Kinjal Brahmbhatt

Reply | Threaded
Open this post in threaded view
|

Re: BUG #16320: GSSAPI Error

fahar
Hi Kinjal,

What is the version of MAC OS X?

Can you please share screen-shot and install-postgresql.log file under /tmp folder?

On Fri, Mar 27, 2020 at 12:14 AM PG Bug reporting form <[hidden email]> wrote:
The following bug has been logged on the website:

Bug reference:      16320
Logged by:          Kinjal Brahmbhatt
Email address:      [hidden email]
PostgreSQL version: 12.2
Operating system:   Mac
Description:       

Hello, i tried to uninstall and reinstall the Postgresql multiple times, but
every time i go to enter my password, it gives me a GSSAPI error.

Please advise.

Thank you,
Kinjal Brahmbhatt



--
Fahar Abbas
QMG
EnterpriseDB Corporation
Phone Office: +92-51-835-8874
Phone Direct: +92-51-8466803
Mobile: +92-333-5409707
Skype ID: live:fahar.abbas
Website: www.enterprisedb.com
Reply | Threaded
Open this post in threaded view
|

Re: BUG #16320: GSSAPI Error

Stephen Frost
In reply to this post by apt.postgresql.org Repository Update
Greetings,

* PG Bug reporting form ([hidden email]) wrote:
> Hello, i tried to uninstall and reinstall the Postgresql multiple times, but
> every time i go to enter my password, it gives me a GSSAPI error.

You're probably getting bit by the broken GSSAPI library on OSX.  Try
installing a supported library (MIT Kerberos or Heimdal).

Thanks,

Stephen

signature.asc (836 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: BUG #16320: GSSAPI Error

Tom Lane-2
Stephen Frost <[hidden email]> writes:
> * PG Bug reporting form ([hidden email]) wrote:
>> Hello, i tried to uninstall and reinstall the Postgresql multiple times, but
>> every time i go to enter my password, it gives me a GSSAPI error.

> You're probably getting bit by the broken GSSAPI library on OSX.  Try
> installing a supported library (MIT Kerberos or Heimdal).

Should we document somewhere that we consider that unsupported?
Trying it here, I see a bunch of "deprecation" warnings during
the build, but it does build --- which might lead people to expect
that it'd work.

                        regards, tom lane


Reply | Threaded
Open this post in threaded view
|

Re: BUG #16320: GSSAPI Error

Stephen Frost
Greetings,

* Tom Lane ([hidden email]) wrote:

> Stephen Frost <[hidden email]> writes:
> > * PG Bug reporting form ([hidden email]) wrote:
> >> Hello, i tried to uninstall and reinstall the Postgresql multiple times, but
> >> every time i go to enter my password, it gives me a GSSAPI error.
>
> > You're probably getting bit by the broken GSSAPI library on OSX.  Try
> > installing a supported library (MIT Kerberos or Heimdal).
>
> Should we document somewhere that we consider that unsupported?
> Trying it here, I see a bunch of "deprecation" warnings during
> the build, but it does build --- which might lead people to expect
> that it'd work.
There had been discussion on another thread about trying to figure out a
way to detect the OSX GSSAPI library and refuse to build with GSSAPI
support when that's what we'd be building against.  I didn't see anyone
post a patch though and I haven't got an OSX box to play with myself
easily at hand.

Thanks,

Stephen

signature.asc (836 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: BUG #16320: GSSAPI Error

Tom Lane-2
Stephen Frost <[hidden email]> writes:
> * Tom Lane ([hidden email]) wrote:
>> Should we document somewhere that we consider that unsupported?
>> Trying it here, I see a bunch of "deprecation" warnings during
>> the build, but it does build --- which might lead people to expect
>> that it'd work.

> There had been discussion on another thread about trying to figure out a
> way to detect the OSX GSSAPI library and refuse to build with GSSAPI
> support when that's what we'd be building against.  I didn't see anyone
> post a patch though and I haven't got an OSX box to play with myself
> easily at hand.

Just poking around, it looks like something along this line would work:

#ifdef GSSKRB_APPLE_DEPRECATED
#error "Postgres doesn't work with the macOS GSSAPI library, please use XXX instead."
#endif

(in any suitable spot after #including gssapi.h)

Now, this is testing the *headers* not the actual *library*, which in
some sense is not the right thing.  But it's probably close enough for
the purpose.

                        regards, tom lane


Reply | Threaded
Open this post in threaded view
|

Re: BUG #16320: GSSAPI Error

Stephen Frost
Greetings,

* Tom Lane ([hidden email]) wrote:

> Stephen Frost <[hidden email]> writes:
> > * Tom Lane ([hidden email]) wrote:
> >> Should we document somewhere that we consider that unsupported?
> >> Trying it here, I see a bunch of "deprecation" warnings during
> >> the build, but it does build --- which might lead people to expect
> >> that it'd work.
>
> > There had been discussion on another thread about trying to figure out a
> > way to detect the OSX GSSAPI library and refuse to build with GSSAPI
> > support when that's what we'd be building against.  I didn't see anyone
> > post a patch though and I haven't got an OSX box to play with myself
> > easily at hand.
>
> Just poking around, it looks like something along this line would work:
>
> #ifdef GSSKRB_APPLE_DEPRECATED
> #error "Postgres doesn't work with the macOS GSSAPI library, please use XXX instead."
> #endif
>
> (in any suitable spot after #including gssapi.h)
>
> Now, this is testing the *headers* not the actual *library*, which in
> some sense is not the right thing.  But it's probably close enough for
> the purpose.
Sounds good to me.

Thanks,

Stephen

signature.asc (836 bytes) Download Attachment