oversize GSSAPI packet sent by the client (16444 > 16380)

Products

• VMware Tanzu Data Suite

Issue/Introduction

Customer ran a bulk insert query using Dbeaver client tool with gssencmode disabled Vs gssencmode=required. Query worked without issues with disabled but returning below error when set to required.

2024-08-07 17:30:17.349 EDT,"fdcdev","api",724460,"10.159.125.181:46623",66b3e2de.b0dec,4,"idle in transaction",2024-08-07 17:10:54 EDT,7/1353,192554983,LOG,00000,"oversize GSSAPI packet sent by the client (16444 > 16380)",,,,,,,,,"PostgreSQL JDBC Driver","client backend",,0

Environment

PG 15.4.0
DBC driver - 15.1.1\java\vmware-postgres-jdbc-42.5.0.jar
dbeaver version 6.3.3

Cause

+ Its a bug in code which made the GSSInputStream always expects to read enough data but if the underlying un-buffered socket does not have enough data, the decrypt will report a checksum error. So the fix was to use the buffered socket to create GSSInputStream in the code.

+This will happen when a user has a slow network (many TCP packages received in one GSSAPI package), it is difficult to reproduce using VM

Resolution

Fix (https://github.com/pgjdbc/pgjdbc/pull/3373) will be available in below releases.

+ Tanzu Postgres 16.4.0, 15.8.0, 14.13.0, 13.16.0, 12.20.0

+ JDBC version 42.7.3.1