pg.ddx.io  pgsql-hackers@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Stephen Frost <sfrost@snowman.net>
To: Michael Paquier <michael.paquier@gmail.com>
Cc: David Steele <david@pgmasters.net>
Cc: Heikki Linnakangas <hlinnaka@iki.fi>
Cc: Bruce Momjian <bruce@momjian.us>
Cc: Greg Stark <stark@mit.edu>
Cc: Robert Haas <robertmhaas@gmail.com>
Cc: Josh Berkus <josh@agliodbs.com>
Cc: Peter Eisentraut <peter_e@gmx.net>
Cc: pgsql-hackers <pgsql-hackers@postgresql.org>
Subject: Re: WIP: SCRAM authentication
Date: Sun, 14 Feb 2016 20:53:06 -0500
Message-ID: <20160215015306.GM3331@tamriel.snowman.net> (raw)
In-Reply-To: <CAB7nPqRr0QYH76aXgpy1DP7+pDiybSiDDvKeB+7DjDPMqHsVwg@mail.gmail.com>
References: <20150905003147.GD21484@momjian.us>
	<CAB7nPqQutw9kRSmu9Ww5CY2Lpmn_=SWfiqgXDtDoH_jdrS7EgQ@mail.gmail.com>
	<56BE1ECD.3020905@pgmasters.net>
	<CAB7nPqTDD_tnU2Pb3LuFcEB0M8iZxAUzemcegqgztxWk26jL4w@mail.gmail.com>
	<20160215001725.GH3331@tamriel.snowman.net>
	<CAB7nPqQ-p0kiVsLZaDSDW2+pe3voO2R9qu6wgfYWZBJZRDC4Rg@mail.gmail.com>
	<20160215005640.GI3331@tamriel.snowman.net>
	<CAB7nPqQqg3PiU9ZREmTzh3_QSJOah7aUWKzhaJLAxQY_hF6JAQ@mail.gmail.com>
	<20160215012326.GK3331@tamriel.snowman.net>
	<CAB7nPqRr0QYH76aXgpy1DP7+pDiybSiDDvKeB+7DjDPMqHsVwg@mail.gmail.com>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-hackers>

* Michael Paquier (michael.paquier@gmail.com) wrote:
> On Mon, Feb 15, 2016 at 10:23 AM, Stephen Frost <sfrost@snowman.net> wrote:
> > I would start by pointing out that pg_user currently uses pg_shadow..
> > Why do we need pg_shadow or pg_user or related views at all..?
> 
> pg_user/pg_shadow have the advantage to be world-readable and mask
> password values.

New views would have that same advantage, should we implement them that
way.  Tom's approach is also workable though, where we make the existing
views have a reducaed charter, which is mainly around providing user
lists and simply not include any info about password verifiers or the
like.

Thanks!

Stephen

Attachments:

  signature.asc (application/pgp-signature, 818B) download

view thread (77+ messages)  latest in thread

Message-ID: <20160215015306.GM3331@tamriel.snowman.net>
Permalink:  ../20160215015306.GM3331@tamriel.snowman.net/
Also on:    postgresql.org/message-id/20160215015306.GM3331@tamriel.snowman.net

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-hackers@postgresql.org
  Cc: sfrost@snowman.net, michael.paquier@gmail.com, david@pgmasters.net, hlinnaka@iki.fi, bruce@momjian.us, stark@mit.edu, robertmhaas@gmail.com, josh@agliodbs.com, peter_e@gmx.net
  Subject: Re: WIP: SCRAM authentication
  In-Reply-To: <20160215015306.GM3331@tamriel.snowman.net>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox