Magnus Hagander <magnus@hagander.net> writes:
> The reason this is happening is that we are initializing Kerberos even
> if we're not going to use it. The reason for doing *this*, is that if
> kerberos is compiled in, we use it to find out if we should try a
> different username than the one logged in to the local system - we look
> at the kerberos login.
> We don't do this for any other login, including kerberos over GSSAPI.
> AFAIK, we've heard no complaints.
> I see two ways to fix this, and have attached two patches:
> 1) Remove the support for getting this username. AFAIK, it's not even
> documented. [krberror_remove.patch]
+1 for this approach.
regards, tom lane