Skip site navigation (1) Skip section navigation (2)

Re: Logging of PAM Authentication Failure

From: Craig Ringer <craig(at)2ndquadrant(dot)com>
To: Robert Haas <robertmhaas(at)gmail(dot)com>
Cc: Amit Langote <amitlangote09(at)gmail(dot)com>, PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Logging of PAM Authentication Failure
Date: 2013-05-28 05:32:53
Message-ID: 51A44185.5060306@2ndquadrant.com (view raw or flat)
Thread:
Lists: pgsql-hackers
On 05/11/2013 03:25 AM, Robert Haas wrote:
> Not really.  We could potentially fix it by extending the wire
> protocol to allow the server to respond to the client's startup packet
> with a further challenge, and extend libpq to report that challenge
> back to the user and allow sending a response.  But that would break
> on-the-wire compatibility, which we haven't done in a good 10 years,
> and certainly wouldn't be worthwhile just for this.
We were just talking about "things we'd like to do in wire protocol 4".

Allowing multi-stage authentication has come up repeatedly and should
perhaps go on that list. The most obvious case being "ident auth failed,
demand md5".

-- 
 Craig Ringer                   http://www.2ndQuadrant.com/
 PostgreSQL Development, 24x7 Support, Training & Services



In response to

Responses

pgsql-hackers by date

Next:From: Szymon GuzDate: 2013-05-28 05:53:26
Subject: Re: adding import in pl/python function
Previous:From: Craig RingerDate: 2013-05-28 05:31:19
Subject: Re: Extent Locks

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group