Skip site navigation (1) Skip section navigation (2)

Re: BUG #5687: RADIUS Authentication issues

From: Alan T DeKok <aland(at)freeradius(dot)org>
To: Magnus Hagander <magnus(at)hagander(dot)net>
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, pgsql-bugs(at)postgresql(dot)org
Subject: Re: BUG #5687: RADIUS Authentication issues
Date: 2010-10-03 06:58:46
Message-ID: 4CA829A6.8050506@freeradius.org (view raw or flat)
Thread:
Lists: pgsql-bugs
Magnus Hagander wrote:
> I think he's referring to the ability to flood the postgresql server
> with radius packets with spoofed IP source, correct?

  Yes.  Or, with any number of other "bad" packets.

> If we then looped
> until we got one that validated as a proper packet, we'd still be able
> to authenticate with that one, just throwing the invalid ones away.
> Notice how the "read packet" part is moved inside the loop in his
> suggestion.

  The patches from my previous message implements that.

  Alan DeKok.

In response to

pgsql-bugs by date

Next:From: Andrea PeriDate: 2010-10-03 09:11:29
Subject: Re: Postgres 9.0 crash on win7
Previous:From: Magnus HaganderDate: 2010-10-03 06:30:28
Subject: Re: BUG #5687: RADIUS Authentication issues

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group