Why don't we allow DNS names in pg_hba.conf?
From:
Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To:
pgsql-hackers(at)postgreSQL(dot)org
Subject:
Why don't we allow DNS names in pg_hba.conf?
Date:
2006-01-01 18:30:46
Message-ID:
26901.1136140246@sss.pgh.pa.us (view raw or flat )
Thread:
2006-01-01 18:30:46 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2006-01-01 18:50:37 from "Marc G(dot) Fournier" <scrappy(at)postgresql(dot)org>
2006-01-01 19:02:03 from Martijn van Oosterhout <kleptog(at)svana(dot)org>
2006-01-01 20:14:45 from John DeSoi <desoi(at)pgedit(dot)com>
2006-01-01 20:03:00 from Andreas Pflug <pgadmin(at)pse-consulting(dot)de>
2006-01-02 18:09:45 from Jon Jensen <jon(at)endpoint(dot)com>
2006-01-02 18:23:42 from Mike Rylander <mrylander(at)gmail(dot)com>
2006-01-02 18:26:20 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2006-01-02 18:55:53 from Jon Jensen <jon(at)endpoint(dot)com>
2006-01-02 19:06:38 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2006-01-03 16:18:12 from "Jim C(dot) Nasby" <jnasby(at)pervasive(dot)com>
2006-01-03 16:54:01 from Euler Taveira de Oliveira <eulerto(at)yahoo(dot)com(dot)br>
2006-01-03 17:34:59 from Andrew Dunstan <andrew(at)dunslane(dot)net>
2006-01-03 17:43:03 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2006-01-03 18:15:45 from mark(at)mark(dot)mielke(dot)cc
2006-01-03 18:21:52 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2006-02-13 03:42:31 from Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us>
2006-02-13 12:57:24 from "Mark Woodward" <pgsql(at)mohawksoft(dot)com>
2006-02-13 15:00:34 from Andrew Dunstan <andrew(at)dunslane(dot)net>
2006-02-13 15:40:31 from mark(at)mark(dot)mielke(dot)cc
2006-02-13 15:48:39 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2006-02-13 15:44:57 from "Mark Woodward" <pgsql(at)mohawksoft(dot)com>
2006-02-13 15:30:39 from Andrew Dunstan <andrew(at)dunslane(dot)net>
2006-02-13 16:57:48 from "Mark Woodward" <pgsql(at)mohawksoft(dot)com>
2006-02-13 16:54:43 from Andrew Dunstan <andrew(at)dunslane(dot)net>
2006-02-13 19:38:38 from "Mark Woodward" <pgsql(at)mohawksoft(dot)com>
2006-02-13 20:07:09 from Andrew Dunstan <andrew(at)dunslane(dot)net>
2006-02-13 20:21:30 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2006-02-13 20:29:33 from "Joshua D(dot) Drake" <jd(at)commandprompt(dot)com>
2006-02-13 20:35:19 from Gregory Maxwell <gmaxwell(at)gmail(dot)com>
2006-02-13 20:44:49 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2006-01-03 18:21:33 from Tino Wildenhain <tino(at)wildenhain(dot)de>
2006-01-03 20:00:24 from Jon Jensen <jon(at)endpoint(dot)com>
2006-01-01 20:04:47 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2006-01-01 21:14:41 from Peter Eisentraut <peter_e(at)gmx(dot)net>
2006-01-01 21:49:57 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2006-01-01 23:37:22 from Andrew Dunstan <andrew(at)dunslane(dot)net>
2006-01-02 03:36:02 from elein <elein(at)varlena(dot)com>
2006-01-02 08:51:23 from <pmagnoli(at)systemevolution(dot)it>
Lists:
pgsql-hackers
I was reminded of $subject by
http://archives.postgresql.org/pgsql-admin/2006-01/msg00002.php
While I haven't tried it, I suspect that allowing a DNS host name
would take little work (basically removing the AI_NUMERICHOST flag
passed to getaddrinfo in hba.c). There was once a good reason not
to allow it: slow DNS lookups would lock up the postmaster. But
now that we do this work in an already-forked backend, with an overall
timeout that would catch any indefinite blockage, I don't see a good
reason why we shouldn't let people use DNS names.
Thoughts?
regards, tom lane
Responses
pgsql-hackers by date
Next :From: Marc G. FournierDate: 2006-01-01 18:50:37Subject : Re: Why don't we allow DNS names in pg_hba.conf?Previous :From : Tom LaneDate : 2006-01-01 17:56:11Subject : Re: Removing SORTFUNC_LT/REVLT
