Re: Patch: use SCM_CREDS authentication over PF_LOCAL sockets
От | Bruce Momjian |
---|---|
Тема | Re: Patch: use SCM_CREDS authentication over PF_LOCAL sockets |
Дата | |
Msg-id | 200108150054.f7F0shZ01852@candle.pha.pa.us обсуждение исходный текст |
Ответ на | Re: Patch: use SCM_CREDS authentication over PF_LOCAL sockets (Tom Lane <tgl@sss.pgh.pa.us>) |
Ответы |
Re: Patch: use SCM_CREDS authentication over PF_LOCAL sockets
|
Список | pgsql-patches |
> Peter Eisentraut <peter_e@gmx.net> writes: > >> BTW, current sources already contain support for using > >> getsockopt(SO_PEERCRED) where available --- AFAIK that's only Linux, > >> but perhaps that's all you need. > > > Is this feature any different from the fake local ident we've put it? > > Yes. Wollman's code uses an SCM_CREDS message, which means (a) it will > work on Solaris and one or two other Unixen, not only Linux; but (b) > it requires client-side code additions, not only server-side code. My upcoming MD5 patch will conflict with this anyway. Also, I just found out that ODBC doesn't even do crypt authentication! Anyway, I will merge this into current sources. Seems we can add it to ODBC and JDBC later, just like the MD5 changes. Is that OK with everyone. Since we have peer with Linux, seems we should add CRED_ in the same release. -- Bruce Momjian | http://candle.pha.pa.us pgman@candle.pha.pa.us | (610) 853-3000 + If your life is a hard drive, | 830 Blythe Avenue + Christ can be your backup. | Drexel Hill, Pennsylvania 19026
В списке pgsql-patches по дате отправления: