OSDN Git Service

I've been having also sorts of fun trying to get kerberos 4
authorBruce Momjian <bruce@momjian.us>
Sun, 14 Mar 1999 16:06:43 +0000 (16:06 +0000)
committerBruce Momjian <bruce@momjian.us>
Sun, 14 Mar 1999 16:06:43 +0000 (16:06 +0000)
commit9cab13c42e1f8535aac5feffcc896051ca6413d3
treeabbf2136ec4c5b46f5e0e92fe2597672e5c0e577
parentaba8c12f679c2324fa42e718beab8e9d57409102
    I've been having also sorts of fun trying to get kerberos 4
authentifica
tion
working with postgresql-6.4.2 and  KTH-KRB Ebones
(http://www.pdc.kth.se/kth-kr
b) on a dec alpha running DU 4.0D using the native compiler. The
following
patch does the trick.

The rationale behind this is as follows. The KTH-KRB code header files
defines
lots of lengths like INST_SZ,REALM_SZ and KRB_SENDAUTH_VLEN. It also has
a
habit of doing things like

        chararray[LENGTH] = '\0'

to ensure null terminated strings. In my instance this just happens to
blat
the kerberos principal instance string leading to error like

        pg_krb4_recvauth: kerberos error: Can't decode authenticator
(krb_rd_req
)

The application code that comes with KTH-KRB uses "KRB_SENDAUTH_VLEN +
1" and
sometimes uses "INST_SZ + 1" so it seems safest to put that 1 char
buffer in
the appropriate place.

Rodney McDuff
src/backend/libpq/auth.c
src/interfaces/libpq/fe-auth.c