Re: Logging of PAM Authentication Failure
От | Craig Ringer |
---|---|
Тема | Re: Logging of PAM Authentication Failure |
Дата | |
Msg-id | 51A44185.5060306@2ndquadrant.com обсуждение исходный текст |
Ответ на | Re: Logging of PAM Authentication Failure (Robert Haas <robertmhaas@gmail.com>) |
Ответы |
Re: Logging of PAM Authentication Failure
Re: Logging of PAM Authentication Failure Re: Logging of PAM Authentication Failure Re: Logging of PAM Authentication Failure |
Список | pgsql-hackers |
On 05/11/2013 03:25 AM, Robert Haas wrote: > Not really. We could potentially fix it by extending the wire > protocol to allow the server to respond to the client's startup packet > with a further challenge, and extend libpq to report that challenge > back to the user and allow sending a response. But that would break > on-the-wire compatibility, which we haven't done in a good 10 years, > and certainly wouldn't be worthwhile just for this. We were just talking about "things we'd like to do in wire protocol 4". Allowing multi-stage authentication has come up repeatedly and should perhaps go on that list. The most obvious case being "ident auth failed, demand md5". -- Craig Ringer http://www.2ndQuadrant.com/PostgreSQL Development, 24x7 Support, Training & Services
В списке pgsql-hackers по дате отправления: