| From: | Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> | 
|---|---|
| To: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> | 
| Cc: | Sean Chittenden <sean(at)chittenden(dot)org>, pgsql-patches(at)postgresql(dot)org | 
| Subject: | Re: Patch to be verbose about being unable to read ~/.pgpasss... | 
| Date: | 2003-06-24 03:01:21 | 
| Message-ID: | 200306240301.h5O31LO13101@candle.pha.pa.us | 
| Views: | Whole Thread | Raw Message | Download mbox | Resend email | 
| Thread: | |
| Lists: | pgsql-patches | 
Is there a TODO here?  Tom has added the printf functionality already.
---------------------------------------------------------------------------
Tom Lane wrote:
> Sean Chittenden <sean(at)chittenden(dot)org> writes:
> > I maintain that having a security concern in PasswordFromFile() cause
> > the connection to abort as the default behavior is a bad idea.
> 
> That is a legitimate concern.  Doesn't seem like we have any really
> clean way to satisfy all the needs here.
> 
> One idea I was toying with was to have PasswordFromFile set a flag in
> the PGconn struct indicating that .pgpass has permissions problems.
> Then some later routine could check the flag and issue the notice if
> needed, giving the app a chance to install its notice handler
> beforehand.  However, this begs the question of *which* later routine
> should do this.  PQexec would once have been the obvious choice, but
> as of 7.4 it's quite possible that some apps would never use it.
> And I don't want to sprinkle the issue through a bunch of different
> routines.  Maybe PQgetResult would be a safe bet that all apps would
> go through (directly or indirectly).  Comments?
> 
> 			regards, tom lane
> 
> ---------------------------(end of broadcast)---------------------------
> TIP 9: the planner will ignore your desire to choose an index scan if your
>       joining column's datatypes do not match
> 
-- 
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman(at)candle(dot)pha(dot)pa(dot)us               |  (610) 359-1001
  +  If your life is a hard drive,     |  13 Roberts Road
  +  Christ can be your backup.        |  Newtown Square, Pennsylvania 19073
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Joe Conway | 2003-06-24 03:01:58 | Re: array support patch phase 1 patch | 
| Previous Message | Bruce Momjian | 2003-06-24 02:56:55 | Re: pg_hba.conf.sample |