From: Tom Lane <tgl@sss.pgh.pa.us>
To: Ervin Weber <webervin@gmail.com>
Cc: Alvaro Herrera <alvherre@alvh.no-ip.org>
Cc: Don Seiler <don@seiler.us>
Cc: pgsql-admin <pgsql-admin@postgresql.org>
Subject: Re: Passwords in clear text in server log
Date: Wed, 11 Oct 2017 16:01:10 -0400
Message-ID: <23672.1507752070@sss.pgh.pa.us> (raw)
In-Reply-To: <CAFC4ZFhLKQ49Jnt75COpK+_68v2uYUkZnDFYhbvy190EpHr_0g@mail.gmail.com>
References: <CAHJZqBCxQth34+KhNji4cQzy9WuNMvpWav863fNDkE0njdq02Q@mail.gmail.com>
<20171011194323.s2alxtl3krdvj7hj@alvherre.pgsql>
<CAFC4ZFhLKQ49Jnt75COpK+_68v2uYUkZnDFYhbvy190EpHr_0g@mail.gmail.com>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-admin>
Ervin Weber <webervin@gmail.com> writes:
> Alvaro Herrera wrote:
>> Actually, I do wonder why we log statements that fail to parse. Surely
>> the client ought to know that it failed, but what is the value of
>> additionally storing the query in the server log?
> To debug clients who claim it is working on their end, but data does not change.
We have heard many times from people who don't have enough insight, or
enough debug support client-side, to know exactly what queries their
apps are issuing. Disabling query logging would be a horrible setback
for debuggability of such apps. How many times have you said "consult
the postmaster log to find out what's going on"?
regards, tom lane
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: tgl@sss.pgh.pa.us, webervin@gmail.com, alvherre@alvh.no-ip.org, don@seiler.us
Subject: Re: Passwords in clear text in server log
In-Reply-To: <23672.1507752070@sss.pgh.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox