Skip to content

Add additional security checks for GSS session encryption and GSS authentication#6525

Merged
vonzshik merged 2 commits into
mainfrom
6523-gss-tighten-security-checks
Apr 13, 2026
Merged

Add additional security checks for GSS session encryption and GSS authentication#6525
vonzshik merged 2 commits into
mainfrom
6523-gss-tighten-security-checks

Conversation

@vonzshik

Copy link
Copy Markdown
Contributor

Closes #6523

@vonzshik vonzshik requested a review from roji as a code owner March 31, 2026 12:03

@roji roji left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

{
var targetName = $"{KerberosServiceName}/{Host}";
// See https://github.com/postgres/postgres/blob/a0dd0702e464f206b08c99a74cb58809c51aafa5/src/interfaces/libpq/fe-auth.c#L111-L123
// We do not support delegation (TokenImpersonationLevel.Delegation) for now

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Open an issue to track this and reference it here?

@vonzshik vonzshik enabled auto-merge (squash) April 13, 2026 12:20
@vonzshik vonzshik merged commit 5f26d61 into main Apr 13, 2026
26 of 27 checks passed
@vonzshik vonzshik deleted the 6523-gss-tighten-security-checks branch April 13, 2026 12:33
vonzshik added a commit that referenced this pull request Apr 13, 2026
@vonzshik

Copy link
Copy Markdown
Contributor Author

Backported to 10.0.3 via d599de9

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Tighten gss auth options for GSS session encryption and GSS authentication

2 participants