Skip site navigation (1) Skip section navigation (2)

Re: Why don't we allow DNS names in pg_hba.conf?

From: Andrew Dunstan <andrew(at)dunslane(dot)net>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: pgsql-hackers(at)postgresql(dot)org
Subject: Re: Why don't we allow DNS names in pg_hba.conf?
Date: 2006-01-01 23:37:22
Message-ID: 43B867B2.4020703@dunslane.net (view raw or flat)
Thread:
Lists: pgsql-hackers

Tom Lane wrote:

>I was reminded of $subject by
>http://archives.postgresql.org/pgsql-admin/2006-01/msg00002.php
>
>While I haven't tried it, I suspect that allowing a DNS host name
>would take little work (basically removing the AI_NUMERICHOST flag
>passed to getaddrinfo in hba.c).  There was once a good reason not
>to allow it: slow DNS lookups would lock up the postmaster.  But
>now that we do this work in an already-forked backend, with an overall
>timeout that would catch any indefinite blockage, I don't see a good
>reason why we shouldn't let people use DNS names.
>
>Thoughts?
>
>
>  
>

We debated this back in May 2003 - I was going to do it but it got lost 
among other stuff. Still worth doing, I think.

cheers

andrew



In response to

pgsql-hackers by date

Next:From: Robert TreatDate: 2006-01-01 23:50:57
Subject: Re: Add a "Known Issues" section
Previous:From: Qingqing ZhouDate: 2006-01-01 22:30:32
Subject: Re: Add a "Known Issues" section

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group