Message-ID: <98e600a9-77c3-970a-93df-fbd19b54c7cd@enterprisedb.com>
Date: Wed, 2 Mar 2022 09:18:17 +0100
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:91.0)
 Gecko/20100101 Thunderbird/91.6.0
Subject: Re: [PATCH] Expose port->authn_id to extensions and triggers
Content-Language: en-US
To: Jacob Champion <pchampion@vmware.com>,
 "rjuju123@gmail.com" <rjuju123@gmail.com>
Cc: "pgsql-hackers@postgresql.org" <pgsql-hackers@postgresql.org>,
 "michael@paquier.xyz" <michael@paquier.xyz>,
 "sfrost@snowman.net" <sfrost@snowman.net>
References: <793d990837ae5c06a558d58d62de9378ab525d83.camel@vmware.com>
 <YhduhD/SvIX5NnxY@paquier.xyz>
 <2e28b12b450f247d5c0994207030c862263e0297.camel@vmware.com>
 <20220224171538.jbf2cxzmhiwuinp4@jrouhaud>
 <a4d9baa0717ca924331cb1dd062788bd73bd14a4.camel@vmware.com>
 <d15d02c92a3e4bdb7cc7b96b0abfe97f213e4445.camel@vmware.com>
 <cdbcf8653e56340f73438e647ea5a26f021627ed.camel@vmware.com>
 <a1eb50ab-c5c5-f73b-4887-58be739d12a1@enterprisedb.com>
 <64586c91c87c067dd912a24438570a8b8ccb93e0.camel@vmware.com>
From: Peter Eisentraut <peter.eisentraut@enterprisedb.com>
In-Reply-To: <64586c91c87c067dd912a24438570a8b8ccb93e0.camel@vmware.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Archived-At: <https://www.postgresql.org/message-id/98e600a9-77c3-970a-93df-fbd19b54c7cd%40enterprisedb.com>
Precedence: bulk

On 01.03.22 23:05, Jacob Champion wrote:
> On Tue, 2022-03-01 at 19:56 +0100, Peter Eisentraut wrote:
>> This patch contains no documentation.  I'm having a hard time
>> understanding what the name "session_authn_id" is supposed to convey.
>> The comment for the Port.authn_id field says this is the "system
>> username", which sounds like a clearer terminology.
> 
> "System username" may help from an internal development perspective,
> especially as it relates to pg_ident.conf, but I don't think that's
> likely to be a useful descriptor to an end user. (I don't think of a
> client certificate's Subject Distinguished Name as a "system
> username".) Does my attempt in v5 help?

Yeah, maybe there are better names.  But I have no idea what the letter 
combination "authn_id" is supposed to stand for.  Is it an 
"authentication identifier"?  What does it identify?  Maybe I'm missing 
something here, but I don't find it clear.