From: Tom Lane <tgl@sss.pgh.pa.us>
To: "David G. Johnston" <david.g.johnston@gmail.com>
cc: Alexey Shishkin <alexey.shishkin.01@gmail.com>,
        "pgsql-bugs@lists.postgresql.org" <pgsql-bugs@lists.postgresql.org>
Subject: Re: pg_ident.conf + regular expressions issue
In-reply-to: 
 <CAKFQuwY5TtT=ekksb79MgQwp_pU=ytiO+Z3qxessQoRxyT-A5w@mail.gmail.com>
References: 
 <CAL2LCjzN9ZgfLApebD_a=Hi=Q6As8+VwjPS6Fr6LUjj_zDVM+A@mail.gmail.com>
 <1556449.1729522277@sss.pgh.pa.us>
 <CAKFQuwY5TtT=ekksb79MgQwp_pU=ytiO+Z3qxessQoRxyT-A5w@mail.gmail.com>
Comments: In-reply-to "David G. Johnston" <david.g.johnston@gmail.com>
	message dated "Mon, 21 Oct 2024 08:09:02 -0700"
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <1565681.1729525743.1@sss.pgh.pa.us>
Date: Mon, 21 Oct 2024 11:49:03 -0400
Message-ID: <1565682.1729525743@sss.pgh.pa.us>
Archived-At: 
 <https://www.postgresql.org/message-id/1565682.1729525743%40sss.pgh.pa.us>
Precedence: bulk

"David G. Johnston" <david.g.johnston@gmail.com> writes:
> The OP never said they were using the ident auth-method. The test involves
> peer authentication with a user name mapping file, pg_ident.conf.  Not
> specifically the ident authentication type (which devolves to peer anyway
> if the connection is local).

Ah, right, -ENOCAFFEINE: I'd forgotten that "ident" is automatically
converted to "peer" for a Unix-socket connection.  So that explains
the phrasing of the error message.

Given that, I don't see anything wrong with the behavior of test05.
The OS user name SMOKEYBEAR successfully matches the rule, sure,
and then the \1 says that that user can log in as role SMOKEYBEAR.
But the request is to log in as smokeybear (lower case), so it fails.
The "(?i)" option only makes the regex able to match different casings
of the OS name, it doesn't make matching of the \1 result to the
requested role name be case-insensitive.

test11 seems to be the same thing, only with actual ident auth.

			regards, tom lane