public inbox for [email protected]help / color / mirror / Atom feed
Re: Remove support for old realpath() API 2+ messages / 2 participants [nested] [flat]
* Re: Remove support for old realpath() API @ 2024-08-12 20:15 Thomas Munro <[email protected]> 0 siblings, 0 replies; 2+ messages in thread From: Thomas Munro @ 2024-08-12 20:15 UTC (permalink / raw) To: Tom Lane <[email protected]>; +Cc: Peter Eisentraut <[email protected]>; Heikki Linnakangas <[email protected]>; pgsql-hackers On Tue, Aug 13, 2024 at 2:35 AM Tom Lane <[email protected]> wrote: > I can confirm that the attached program works on cfarm111 (AIX 7.1) > and cfarm119 (AIX 7.3), though "man realpath" denies it on both > systems. Another example of this phenomenon: they have nl_langinfo_l(), a POSIX 2008 feature we want in a nearby thread, but the online documentation and man pages also deny that. ^ permalink raw reply [nested|flat] 2+ messages in thread
* Re: Proposal: new file format for hba/ident/hosts configuration? @ 2026-07-09 22:48 Jacob Champion <[email protected]> 0 siblings, 0 replies; 2+ messages in thread From: Jacob Champion @ 2026-07-09 22:48 UTC (permalink / raw) To: Zsolt Parragi <[email protected]>; +Cc: Andrew Dunstan <[email protected]>; Tristan Partin <[email protected]>; PostgreSQL Hackers <[email protected]> On Wed, Jul 8, 2026 at 8:33 AM Zsolt Parragi <[email protected]> wrote: > I focused on TOML in my email because I think that's still a better > configuration format than JSON5. (I agree) > * do we agree on working towards another configuration format? > * if yes, what requirements do we have for it? > * what exact issues do we want to solve, and what to leave as non-goals? Adding small pieces to this pile: I'm primarily motivated by authn/z, and I'd like to be able to more intuitively attach parameters to certain connection contexts. This is something that neither a flat configuration, nor separated tabular configurations, have really helped us with. "Connections using SCRAM authentication should time out in X seconds instead of the default." Or "this group of users should use the following list of GUCs." The sample I used in [1] a long time ago was Everyone has to use LDAP auth With this server And these TLS settings Except admins who additionally need client certificates with this CA root And Jacob who isn't allowed in anymore We don't handle these (perfectly reasonable IMO) cases very well, or sometimes at all. I'm primarily used to servers in the web space (httpd, nginx, caddy, haproxy) when it comes to this configuration style, which I think I called "contexts with property bags" in that other thread. > * I am unsure about using the array syntax for hba rules, but so far I > like it better than the alternative ideas I tried FWIW I find that part of it pretty hard to read and understand, though that should not in any way spike the general concept into the ground. Thanks! --Jacob [1] https://postgr.es/m/0e0c038ab962c3f6dab00934fe5ae1ae115f44c0.camel%40vmware.com ^ permalink raw reply [nested|flat] 2+ messages in thread
end of thread, other threads:[~2026-07-09 22:48 UTC | newest] Thread overview: 2+ messages (download: mbox mbox.gz follow: Atom feed) -- links below jump to the message on this page -- 2024-08-12 20:15 Re: Remove support for old realpath() API Thomas Munro <[email protected]> 2026-07-09 22:48 Re: Proposal: new file format for hba/ident/hosts configuration? Jacob Champion <[email protected]>
This inbox is served by agora; see mirroring instructions for how to clone and mirror all data and code used for this inbox