Re: TODO Item: Allow pg_hba.conf to specify host names along with IP addresses

From: Alvaro Herrera <alvherre(at)commandprompt(dot)com>
To: Andrew Sullivan <ajs(at)commandprompt(dot)com>, pgsql-hackers(at)postgresql(dot)org
Subject: Re: TODO Item: Allow pg_hba.conf to specify host names along with IP addresses
Date: 2008-06-13 20:14:13
Message-ID: 20080613201413.GD5070@alvh.no-ip.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Andrew Sullivan wrote:

> This is because DNS RRs have a TTL on them, so looking up the host at
> any moment other than when you're actually doing the authentication is
> prone to error.

Perhaps the solution to this problem is to do the lookups and store the
TTL of each answer. At the time of actually checking you need only get
a new answer for those that expired.

--
Alvaro Herrera http://www.CommandPrompt.com/
PostgreSQL Replication, Consulting, Custom Development, 24x7 support

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message James William Pye 2008-06-13 21:43:28 Re: Options for protocol level cursors
Previous Message Simon Riggs 2008-06-13 20:06:50 Re: Change lock requirements for adding a trigger