]> git.ipfire.org Git - thirdparty/postgresql.git/commit
Remove RADIUS support.
authorThomas Munro <tmunro@postgresql.org>
Wed, 8 Apr 2026 10:38:43 +0000 (22:38 +1200)
committerThomas Munro <tmunro@postgresql.org>
Wed, 8 Apr 2026 10:38:43 +0000 (22:38 +1200)
commita1643d40b308911cc725e62d3c5f7904b426aa09
tree8c6fd323a5d5325fb2a75006e6ea57a5e12db88f
parent28972b6fc3dcd1296e844246b635eddfa29c38e1
Remove RADIUS support.

Our RADIUS implementation supported only the deprecated RADIUS/UDP
variant, without the recommended Message-Authenticator attribute to
mitigate against the Blast-RADIUS vulnerability.  By now, popular RADIUS
servers are expected to generate loud warnings or reject our
authentication attempts outright.

Since there have been no user reports about this, it seems unlikely that
there are users.

Reviewed-by: Álvaro Herrera <alvherre@kurilemu.de>
Reviewed-by: Aleksander Alekseev <aleksander@tigerdata.com>
Reviewed-by: Tom Lane <tgl@sss.pgh.pa.us>
Reviewed-by: Jacob Champion <jacob.champion@enterprisedb.com>
Reviewed-by: Michael Banck <mbanck@gmx.net>
Discussion: https://postgr.es/m/CA%2BhUKG%2BSH309V8KECU5%3DxuLP9Dks0v9f9UVS2W74fPAE5O21dg%40mail.gmail.com
doc/src/sgml/appendix-obsolete-auth-radius.sgml [new file with mode: 0644]
doc/src/sgml/appendix-obsolete.sgml
doc/src/sgml/client-auth.sgml
doc/src/sgml/filelist.sgml
src/backend/libpq/auth.c
src/backend/libpq/hba.c
src/backend/libpq/pg_hba.conf.sample
src/backend/utils/adt/hbafuncs.c
src/include/libpq/hba.h
src/tools/pgindent/typedefs.list