From: Tom Lane Date: Thu, 27 Jul 2023 16:07:48 +0000 (-0400) Subject: Raise fixed token-length limit in hba.c. X-Git-Tag: REL_11_21~8 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=1d031ad54d37dc6a9037af092dafa06251b85434;p=thirdparty%2Fpostgresql.git Raise fixed token-length limit in hba.c. Historically, hba.c limited tokens in the authentication configuration files (pg_hba.conf and pg_ident.conf) to less than 256 bytes. We have seen a few reports of this limit causing problems; notably, for moderately-complex LDAP configurations. Increase the limit to 10240 bytes as a low-risk stop-gap solution. In v13 and earlier, this also requires raising MAX_LINE, the limit on overall line length. I'm hesitant to make this code consume too much stack space, so I only raised that to 20480 bytes. Discussion: https://postgr.es/m/1588937.1690221208@sss.pgh.pa.us --- diff --git a/src/backend/libpq/hba.c b/src/backend/libpq/hba.c index 9d5d9ccd231..3b948c48cc0 100644 --- a/src/backend/libpq/hba.c +++ b/src/backend/libpq/hba.c @@ -53,8 +53,8 @@ #endif -#define MAX_TOKEN 256 -#define MAX_LINE 8192 +#define MAX_TOKEN 10240 +#define MAX_LINE 20480 /* callback data for check_network_callback */ typedef struct check_network_data