Subject: Re: Password identifiers, protocol aging and SCRAM protocol
To: pgsql-hackers@postgresql.org
References: 
 <CAB7nPqSMXU35g=W9X74HVeQp0uvgJxvYOuA4A-A3M+0wfEBv-w@mail.gmail.com>
 <56CF2DEA.8070204@postgrespro.ru>
 <CAB7nPqSwDsDZ=CeUcUX+yc5vmdT_N1rjLBJ_uGPfvOi850Sj1A@mail.gmail.com>
From: Valery Popov <v.popov@postgrespro.ru>
Message-ID: <56D06C67.8050306@postgrespro.ru>
Date: Fri, 26 Feb 2016 18:16:55 +0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101
 Thunderbird/38.5.1
MIME-Version: 1.0
In-Reply-To: 
 <CAB7nPqSwDsDZ=CeUcUX+yc5vmdT_N1rjLBJ_uGPfvOi850Sj1A@mail.gmail.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Precedence: bulk
Sender: pgsql-hackers-owner@postgresql.org


26.02.2016 01:10, Michael Paquier пишет:
> On Fri, Feb 26, 2016 at 1:38 AM, Valery Popov <v.popov@postgrespro.ru> wrote:
>> Hi, Michael
>>
>>
>> 23.02.2016 10:17, Michael Paquier пишет:
>>> Attached is a set of patches implementing a couple of things that have
>>> been discussed, so let's roll in.
>>>
>>> Those 4 patches are aimed at putting in-core basics for the concept I
>>> call password protocol aging, which is a way to allow multiple
>>> password protocols to be defined in Postgres, and aimed at easing
>>> administration as well as retirement of outdated protocols, which is
>>> something that is not doable now in Postgres.
>>>
>>> The second set of patch 0005~0008 introduces a new protocol, SCRAM.
>>> 9) 0009 is the SCRAM authentication itself....
>> The theme with password checking is interesting for me, and I can give
>> review for CF for some features.
>> I think that review of all suggested features will require a lot of time.
>> Is it possible to make subset of patches concerning only password strength
>> and its aging?
>> The patches you have applied are non-independent. They should be apply
>> consequentially one by one.
>> Thus the patch 0009 can't be applied without git error  before 0001.
>> In this conditions all patches were successfully applied and compiled.
>> All tests successfully passed.
> If you want to focus on the password protocol aging, you could just
> have a look at 0001~0004.
OK, I will review patches 0001-0004, for starting.

-- 
Regards,
Valery Popov
Postgres Professional http://www.postgrespro.com
The Russian Postgres Company


-- 
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers