Re: [PATCH] Fix bug when calling strncmp in check_authmethod_valid

From: Daniel Gustafsson <daniel(at)yesql(dot)se>
To: Jingxian Li <aqktjcm(at)qq(dot)com>
Cc: PostgreSQL Hackers <pgsql-hackers(at)postgresql(dot)org>, Michael Paquier <michael(at)paquier(dot)xyz>
Subject: Re: [PATCH] Fix bug when calling strncmp in check_authmethod_valid
Date: 2024-05-13 08:34:48
Message-ID: A75E69B9-436D-409B-BBB8-E94076146E5D@yesql.se
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

> On 7 May 2024, at 06:46, Jingxian Li <aqktjcm(at)qq(dot)com> wrote:

>> But, since it's been broken in all supported versions of postgres and has
>> AFAICT never been documented to exist, should we fix it or just remove it? We
>> don't support auth-options for any other methods, like clientcert to cert for
>> example. If we fix it we should also document that it works IMHO.
>
> You mentioned that auth-options are not supported for auth methods except pam,
> but I found that some methods (such as ldap and radius etc.) also requires aut-options,
> and there are no corresponding auth methods ending with space (such as "ldap " and
> radius ") present in auth_methods_host and auth_methods_local arrays.

Correct, only pam and ident were ever supported (yet not documented) and ident
was removed a long time ago.

Searching the archives I was unable to find any complaints, and this has been
broken for the entire window of supported releases, so I propose we remove it
as per the attached patch. If anyone is keen on making this work again for all
the types where it makes sense, it can be resurrected (probably with a better
implementation).

Any objections to fixing this in 17 by removing it? (cc:ing Michael from the RMT)

--
Daniel Gustafsson

Attachment Content-Type Size
v2-0001-Remove-auth-options-support-from-initdb.patch application/octet-stream 2.1 KB

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Daniel Gustafsson 2024-05-13 08:45:57 Re: Add SPLIT PARTITION/MERGE PARTITIONS commands
Previous Message Andy Fan 2024-05-13 08:19:43 Re: Parallel CREATE INDEX for GIN indexes