Re: Why don't we allow DNS names in pg_hba.conf?

From: Andrew Dunstan <andrew(at)dunslane(dot)net>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: pgsql-hackers(at)postgresql(dot)org
Subject: Re: Why don't we allow DNS names in pg_hba.conf?
Date: 2006-01-01 23:37:22
Message-ID: 43B867B2.4020703@dunslane.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Tom Lane wrote:

>I was reminded of $subject by
>http://archives.postgresql.org/pgsql-admin/2006-01/msg00002.php
>
>While I haven't tried it, I suspect that allowing a DNS host name
>would take little work (basically removing the AI_NUMERICHOST flag
>passed to getaddrinfo in hba.c). There was once a good reason not
>to allow it: slow DNS lookups would lock up the postmaster. But
>now that we do this work in an already-forked backend, with an overall
>timeout that would catch any indefinite blockage, I don't see a good
>reason why we shouldn't let people use DNS names.
>
>Thoughts?
>
>
>
>

We debated this back in May 2003 - I was going to do it but it got lost
among other stuff. Still worth doing, I think.

cheers

andrew

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Robert Treat 2006-01-01 23:50:57 Re: Add a "Known Issues" section
Previous Message Qingqing Zhou 2006-01-01 22:30:32 Re: Add a "Known Issues" section