Skip to content

Add additional security checks for GSS session encryption and GSS authentication#6525

Open
vonzshik wants to merge 1 commit intomainfrom
6523-gss-tighten-security-checks
Open

Add additional security checks for GSS session encryption and GSS authentication#6525
vonzshik wants to merge 1 commit intomainfrom
6523-gss-tighten-security-checks

Conversation

@vonzshik
Copy link
Copy Markdown
Contributor

Closes #6523

@vonzshik vonzshik requested a review from roji as a code owner March 31, 2026 12:03
Copy link
Copy Markdown
Member

@roji roji left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

{
var targetName = $"{KerberosServiceName}/{Host}";
// See https://github.com/postgres/postgres/blob/a0dd0702e464f206b08c99a74cb58809c51aafa5/src/interfaces/libpq/fe-auth.c#L111-L123
// We do not support delegation (TokenImpersonationLevel.Delegation) for now
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Open an issue to track this and reference it here?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Tighten gss auth options for GSS session encryption and GSS authentication

2 participants