X-Original-To: pgsql-hackers-postgresql.org@localhost.postgresql.org Received: from localhost (av.hub.org [200.46.204.144]) by postgresql.org (Postfix) with ESMTP id 7E8C711F655C for ; Mon, 17 Apr 2006 11:34:19 -0300 (ADT) X-Virus-Scanned: by amavisd-new at hub.org X-Spam-Score: 0.131 X-Spam-Level: X-Spam-Status: No, score=0.131 required=5 tests=[AWL=0.131] Received: from postgresql.org ([200.46.204.71]) by localhost (av.hub.org [200.46.204.144]) (amavisd-new, port 10024) with ESMTP id ATr950uV3JaB for ; Mon, 17 Apr 2006 11:34:07 -0300 (ADT) X-Greylist: from auto-whitelisted by SQLgrey- Received: from ns.snowman.net (ns.snowman.net [66.92.160.21]) by postgresql.org (Postfix) with ESMTP id 4BF5111F65BF for ; Mon, 17 Apr 2006 11:34:10 -0300 (ADT) Received: by ns.snowman.net (Postfix, from userid 1000) id 2F85217AD3; Mon, 17 Apr 2006 10:35:26 -0400 (EDT) Date: Mon, 17 Apr 2006 10:35:26 -0400 From: Stephen Frost To: "Jonah H. Harris" Cc: Pgsql Hackers Subject: Re: Google SoC--Idea Request Message-ID: <20060417143526.GE4474@ns.snowman.net> Mail-Followup-To: "Jonah H. Harris" , Pgsql Hackers References: <36e682920604151205i75a08030x7c05a6f52fccf095@mail.gmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="52IrTooDmyxzDFvH" Content-Disposition: inline In-Reply-To: <36e682920604151205i75a08030x7c05a6f52fccf095@mail.gmail.com> X-Editor: Vim http://www.vim.org/ X-Info: http://www.snowman.net X-Operating-System: Linux/2.4.24ns.3.0 (i686) X-Uptime: 10:25:36 up 310 days, 6:31, 9 users, load average: 0.44, 0.18, 0.06 User-Agent: Mutt/1.5.11 X-Archive-Number: 200604/629 X-Sequence-Number: 82352 --52IrTooDmyxzDFvH Content-Type: text/plain; charset=us-ascii Content-Disposition: inline * Jonah H. Harris (jonah.harris@gmail.com) wrote: > I know we started a discussion a month or so ago regarding ideas for > SoC projects. However, after reading through the thread, I didn't see > us nail down any actual items. I got an email already for a good idea, actually, which is to work on having pg_hba.conf modifiable from SQL. The only problem with that is that it really needs to be done in an acceptable way which requires probably as much design work as actual programming. Another idea along those same lines would be having .k5login-style support for Kerberos. We'd need a conf-flag for that for backwards compatibility (once the .k5login-style support exists we should clean up our Kerberos credentials matching to, for example, not accept 'sfrost/root' for 'sfrost' or 'sfrost@ABC.COM' for 'sfrost@XYZ.com'). It'd also be nice to support SASL, and better hashes than md5. Thanks, Stephen --52IrTooDmyxzDFvH Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) iD8DBQFEQ6eurzgMPqB3kigRAohXAJ0XAln8b1QjsTYq3xfRsNADl+Ml/wCeOcAl jAc2iIVUzm1tuvLiEZ0CXDU= =i7rd -----END PGP SIGNATURE----- --52IrTooDmyxzDFvH--