r2dbc-postgresql icon indicating copy to clipboard operation
r2dbc-postgresql copied to clipboard

Published 20 hours ago • verified publisher icon pgjdbc

Add support for GSS/Kerberos with Postgres 12

Open mp911de opened this issue 5 years ago • 4 comments
trafficstars

Postgres 12 added Kerberos support, so it would make sense to support it as well. We need to ensure that Kerberos support doesn't introduce blocking calls when obtaining the principal where we don't want to have blocking calls.

Reference:

  • https://github.com/pgjdbc/pgjdbc/pull/1821
  • https://www.postgresql.org/docs/12/gssapi-auth.html

mp911de avatar Aug 13 '20 12:08 mp911de

anyone working on this? I would like to give it a shot.

govi20 avatar Jul 07 '21 08:07 govi20

Feel free, we hadn't had the time yet to work on this ticket.

mp911de avatar Jul 07 '21 08:07 mp911de

Be a bit careful here. When I implemented it on the JDBC driver I tried to see if the server would respond correctly and a few big cloud providers just errored and closed the connection. Currently the driver uses some private methods to see if there is a key cached before attempting a GSS conversation. This is not ideal either

davecramer avatar Jul 07 '21 10:07 davecramer

@davecramer Sure, thanks for the inputs. Let me go through the JDBC patch to get an understanding of how it works.

govi20 avatar Jul 09 '21 08:07 govi20