Skip site navigation (1) Skip section navigation (2)

Re: Patch to include PAM support...

From: Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: "Dominic J(dot) Eidson" <sauron(at)the-infinite(dot)org>, pgsql-patches(at)postgresql(dot)org
Subject: Re: Patch to include PAM support...
Date: 2001-06-12 18:57:00
Message-ID: 200106121857.f5CIv0s02932@candle.pha.pa.us (view raw or flat)
Thread:
Lists: pgsql-hackerspgsql-patches
> Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> writes:
> >> Because (a) it greatly increases the scope of the vulnerability,
> 
> > How?  It is just a new authentication method with the same problems as
> > our current ones.
> 
> No, it is not *a* new authentication method, it is an open interface
> that could be plugged into almost anything.  We need the top-level
> postmaster process to be absolutely reliable; plugging into "almost
> anything" is not conducive to reliability.

But isn't that the responsibility of the administrator?  They are
already responsible for the IDENT servers they use.  Isn't this the same
thing.


> Besides, an hour ago you were ready to reject this patch for lack of
> interest.  Why are you suddenly so eager to ignore the risks and apply
> it anyway?

Because some have now said they want it and I do not see the _new_ risks.

-- 
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman(at)candle(dot)pha(dot)pa(dot)us               |  (610) 853-3000
  +  If your life is a hard drive,     |  830 Blythe Avenue
  +  Christ can be your backup.        |  Drexel Hill, Pennsylvania 19026

In response to

Responses

pgsql-hackers by date

Next:From: Tom LaneDate: 2001-06-12 19:01:40
Subject: Re: Patch to include PAM support...
Previous:From: Tom LaneDate: 2001-06-12 18:44:08
Subject: Re: Patch to include PAM support...

pgsql-patches by date

Next:From: Tom LaneDate: 2001-06-12 19:01:40
Subject: Re: Patch to include PAM support...
Previous:From: Tom LaneDate: 2001-06-12 18:44:08
Subject: Re: Patch to include PAM support...

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group