Bug 50644

Summary: Postgreqsl not compiled with SSL and Kerberos support
Product: [Retired] Red Hat Linux Reporter: Derek Atkins <warlord>
Component: postgresqlAssignee: Trond Eivind Glomsrxd <teg>
Status: CLOSED RAWHIDE QA Contact: David Lawrence <dkl>
Severity: medium Docs Contact:
Priority: medium    
Version: 7.1Keywords: Security
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2001-08-03 15:05:56 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Derek Atkins 2001-08-01 21:08:38 UTC
From Bugzilla Helper:
User-Agent: Mozilla/4.74 [en] (X11; U; Linux 2.2.14-5.0 i686)

Description of problem:
Red Hat Linux ships with both Kerberos v5 and OpenSSL but PostgreSQL is not
compiled with either Kerberos or SSL support.  This implies that users
cannot secure their Postgres connections using the prebuilt packages.

How reproducible:
Always

Steps to Reproduce:
1. read the fine manual
2.
3.
	

Actual Results:  connections are insecure, and configuring for ssl/kerberos
does not work

Expected Results:  Since RHL ships with krb5 and openssl, it should be
expected that other packages that already have support for krb5 and openssl
would be compiled with that support.  Postgres does have krb5 and openssl
support, but is not compiled with it.

Additional info:

Check out:
http://postgresql.bteg.net/devel-corner/docs/postgres/ssl-tcp.html

Also:
./configure --with-krb5=/usr --with-openssl=/usr

Comment 1 Trond Eivind Glomsrxd 2001-08-02 20:38:17 UTC
Newer releases of PostgreSQL, like postgresql-7.1.2-6, are compiled with ssl
support.

Comment 2 Derek Atkins 2001-08-03 14:57:25 UTC
Yes, the rawhide version (7.1.2-6) is compiled with SSL support, but
unfortunately it is STILL not compiled with Kerberos v5 support.  Could you
please also ./configure --with-krb5?

Thanks

Comment 3 Trond Eivind Glomsrxd 2001-08-06 22:22:06 UTC
Added in postgresql-7.1.2-7