pg.ddx.io  pgsql-bugs@postgresql.org mailing list archive  
help / color / mirror / Atom feed
From: Nathan Bossart <nathandbossart@gmail.com>
To: Christophe Pettus <xof@thebuild.com>
Cc: vaibhave postgres <postgresvaibhave@gmail.com>
Cc: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Fujii Masao <masao.fujii@oss.nttdata.com>
Cc: Noah Misch <noah@leadboat.com>
Cc: PostgreSQL Bug List <pgsql-bugs@lists.postgresql.org>
Cc: vsekar@microsoft.com
Subject: Re: vacuumdb: permission denied for schema "pg_temp_7"
Date: Tue, 24 Sep 2024 09:30:21 -0500
Message-ID: <ZvLM_Rqel-t_58IQ@nathan> (raw)
In-Reply-To: <FA25664E-EDD5-42BE-AA25-1321E0A0C8BC@thebuild.com>
References: <Zu3iMzfiGBTbg3iy@nathan>
	<20240920215030.8d.nmisch@google.com>
	<2603142.1726873660@sss.pgh.pa.us>
	<5f37ee56-14fb-44fe-9150-9eb97e10538b@oss.nttdata.com>
	<2649165.1726898595@sss.pgh.pa.us>
	<CAM_eQjyWnu_LUt6JWjh3boNFHAT9DBrcbamhG3Xy39Q4Ph=2rg@mail.gmail.com>
	<ZvGye19tHrhLCpFl@nathan>
	<E9660D68-5B26-488E-9AB2-2CA1E8EDDDA1@thebuild.com>
	<CAM_eQjxZC2RNTGZ0NZLtkZ5DVn1=L6GBrUWzt-MkU4X4k5h60g@mail.gmail.com>
	<FA25664E-EDD5-42BE-AA25-1321E0A0C8BC@thebuild.com>

On Mon, Sep 23, 2024 at 06:13:23PM -0700, Christophe Pettus wrote:
> One related but not identical thing that has come up with vacuumdb is
> that it terminates if it's not able to connect to any database that it
> finds in the initial query.  This can happen if pg_hba.conf denies the
> user that is running vacuumdb access to a database that comes up during
> --all.  Some hosting providers (in particular, Google) create restricted
> databases in the cluster that a customer role can't get access to.  This
> pretty much defeats --analyze-in-stages.  My suggested fix was to
> terminate with an error if the initial connection fails, but continue
> with a warning if further connections fail.

I think it'd be fine to continue with a warning when --all is used, but if
you specify a --dbname that you cannot connect to, then I think it should
fail.

-- 
nathan





view thread (33+ messages)  latest in thread

Message-ID: <ZvLM_Rqel-t_58IQ@nathan>
Permalink:  ../ZvLM_Rqel-t_58IQ@nathan/
Also on:    postgresql.org/message-id/ZvLM_Rqel-t_58IQ@nathan

 · 

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-bugs@postgresql.org
  Cc: nathandbossart@gmail.com, xof@thebuild.com, postgresvaibhave@gmail.com, tgl@sss.pgh.pa.us, masao.fujii@oss.nttdata.com, noah@leadboat.com, pgsql-bugs@lists.postgresql.org, vsekar@microsoft.com
  Subject: Re: vacuumdb: permission denied for schema "pg_temp_7"
  In-Reply-To: <ZvLM_Rqel-t_58IQ@nathan>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox