Re: Patch: use SCM_CREDS authentication over PF_LOCAL sockets

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: wollman(at)LCS(dot)MIT(dot)EDU
Cc: pgsql-patches(at)postgresql(dot)org
Subject: Re: Patch: use SCM_CREDS authentication over PF_LOCAL sockets
Date: 2001-08-13 14:14:14
Message-ID: 16736.997712054@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-patches

wollman(at)LCS(dot)MIT(dot)EDU writes:
> The following set of patches (relative to 7.1.2 release) implement
> SCM_CREDS authentication for local connections.

Unfortunately, there's little chance that this will apply cleanly to
current sources, since we've restructured the postmaster's handling of
the authorization process.

A more significant objection is that you've extended the wire protocol
by adding a new authorization protocol, but have fixed only one client
library and not touched the protocol documentation at all. There's a
lot more work needed to make this a complete patch.

BTW, current sources already contain support for using
getsockopt(SO_PEERCRED) where available --- AFAIK that's only Linux,
but perhaps that's all you need.

regards, tom lane

In response to

Responses

Browse pgsql-patches by date

  From Date Subject
Next Message Tom Lane 2001-08-13 14:23:24 Re: Re: [PATCHES] Select parser at runtime
Previous Message Tom Lane 2001-08-13 13:57:17 Re: Re: [PATCHES] Select parser at runtime