public inbox for [email protected]  
help / color / mirror / Atom feed
From: Peter Eisentraut <[email protected]>
To: Tom Lane <[email protected]>
Cc: Bruce Momjian <[email protected]>
Cc: [email protected]
Subject: Re: pgsql: Mention that PAM requires the user already exist in the database,
Date: Fri, 29 Apr 2005 00:23:33 +0200
Message-ID: <[email protected]> (raw)
In-Reply-To: <[email protected]>
References: <[email protected]>
	<[email protected]>

Tom Lane wrote:
> I don't recall exactly what Dick suggested, but the patch as applied
> seems like fairly useless verbiage.  Exactly which of our other auth
> methods allow users who *don't* exist in the database to log in?
> And why would anyone find it surprising that this does not happen?

I think the difference is that PAM carries a user list of its own, and 
users might be led to believe that it's enough to create a user in the 
PAM system and it will automatically exist in the database.

With the other authentication methods, there is no external user list.

-- 
Peter Eisentraut
http://developer.postgresql.org/~petere/




view thread (8+ messages)

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected], [email protected], [email protected]
  Subject: Re: pgsql: Mention that PAM requires the user already exist in the database,
  In-Reply-To: <[email protected]>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox