diff options
| author | Magnus Hagander <magnus@hagander.net> | 2014-01-15 17:24:01 +0100 |
|---|---|---|
| committer | Magnus Hagander <magnus@hagander.net> | 2014-01-19 17:05:01 +0100 |
| commit | 98de86e4221a418d670db86bf28ff15e880beadc (patch) | |
| tree | aeba76356dfe639d4e9aff48875062f1defb16cc /src/interfaces/libpq/fe-connect.c | |
| parent | 4b8f2859ccc4fe1e9b66fbdb332b830b69a9d6cf (diff) | |
Remove support for native krb5 authentication
krb5 has been deprecated since 8.3, and the recommended way to do
Kerberos authentication is using the GSSAPI authentication method
(which is still fully supported).
libpq retains the ability to identify krb5 authentication, but only
gives an error message about it being unsupported. Since all authentication
is initiated from the backend, there is no need to keep it at all
in the backend.
Diffstat (limited to 'src/interfaces/libpq/fe-connect.c')
| -rw-r--r-- | src/interfaces/libpq/fe-connect.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/interfaces/libpq/fe-connect.c b/src/interfaces/libpq/fe-connect.c index 3a9ddf19d7d..fa88c874945 100644 --- a/src/interfaces/libpq/fe-connect.c +++ b/src/interfaces/libpq/fe-connect.c @@ -278,7 +278,7 @@ static const internalPQconninfoOption PQconninfoOptions[] = { "Require-Peer", "", 10, offsetof(struct pg_conn, requirepeer)}, -#if defined(KRB5) || defined(ENABLE_GSS) || defined(ENABLE_SSPI) +#if defined(ENABLE_GSS) || defined(ENABLE_SSPI) /* Kerberos and GSSAPI authentication support specifying the service name */ {"krbsrvname", "PGKRBSRVNAME", PG_KRB_SRVNAM, NULL, "Kerberos-service-name", "", 20, @@ -2823,7 +2823,7 @@ freePGconn(PGconn *conn) free(conn->sslcompression); if (conn->requirepeer) free(conn->requirepeer); -#if defined(KRB5) || defined(ENABLE_GSS) || defined(ENABLE_SSPI) +#if defined(ENABLE_GSS) || defined(ENABLE_SSPI) if (conn->krbsrvname) free(conn->krbsrvname); #endif |