Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1pFX2d-0006ou-Pa for pgsql-hackers@arkaria.postgresql.org; Wed, 11 Jan 2023 09:05:04 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1pFX2c-0008Cx-P8 for pgsql-hackers@arkaria.postgresql.org; Wed, 11 Jan 2023 09:05:02 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1pFX2c-0008CY-5J for pgsql-hackers@lists.postgresql.org; Wed, 11 Jan 2023 09:05:02 +0000 Received: from mail-am6eur05on2109.outbound.protection.outlook.com ([40.107.22.109] helo=EUR05-AM6-obe.outbound.protection.outlook.com) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1pFX2a-0002Sn-Bd for pgsql-hackers@lists.postgresql.org; Wed, 11 Jan 2023 09:05:01 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=igJs/yUZ5C0diCmTPouJ8WRkm5GC2d8R3hnMZ/cjmsMgTIRQrDks1dFrMRhR4JAieoFkxAa9wNYRZSFzw1FwHCYaORoqNXS40XnfGjr3JmVTdwj9/Dhn4GApgrWmcly2dFZ53BxUq0uLRjahmrsQqLw+JpH5qyodhAoZQrdvfFnf4RkN7i9YyK8+bbusiZRmCvycj04Wrma8QzGGG2ifzqY/BHOCt9MC70HUw66+e7R6EKAMVUXohoSYBM2hbV7IdHf5RxfsjXvZtu0VYYxtbHrcmv8iNAN0efSY8NCzHkX2nRErfFgsAuv1flGfEXhH5qxO88IyVfJwilaS3SAwOQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=T1csFuG9u3dAJHSPTVRNFpWkAgQ99Sq2Fnh7k7wPKWE=; b=N6c1Y7zCX9WNrfka5SOkwg05EINH7xtJi2JBunSiXYUkG9gSKPiZxiiEvcD0BVWkVYd3/7kLWuS8ERWu3n6po9bR2xSDJxfoJU00lI1rMEKbJU7lF3PsrUdxas6arptMn7qpINZn1NmwifG2Cb5/6RO0t13hr/UHKV4LY0E5NhFM2Vcg3tTOrstVgF1Y/rBd9HpoCgWazipth+OtqxcJq/rfP5ofQNMAuRoVrrav8pOzvNI3aiF3A8VR+8p3xvWTl5DmsCLJEBdqWkbyZ8Z1q5OzSx9qbkcdJ/t0geT2GRbBQFGjj/kYD0LEEVE0CNZ04GByZGTtnqCiE68H5ndWhg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=T1csFuG9u3dAJHSPTVRNFpWkAgQ99Sq2Fnh7k7wPKWE=; b=iP9jwwvdHNs7K1sLRT0R747MhiSxbo+niEqWCRUbEvSLw4hffPfmMkplrHE4lZ6ho04LwoMXUHeO9wQX/If3pHN7nqVpBYxlkHFSzQphYUn+xjpPk4AuapW28soDGSQtXpI1nKTswia9sRaI6D13veZLo+2ACX8cx5MJXDVpDPg= Received: from DBBPR83MB0507.EURPRD83.prod.outlook.com (2603:10a6:10:209::18) by VI1PR83MB0478.EURPRD83.prod.outlook.com (2603:10a6:800:196::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6023.6; Wed, 11 Jan 2023 09:04:56 +0000 Received: from DBBPR83MB0507.EURPRD83.prod.outlook.com ([fe80::8fe5:5d42:6056:3ed7]) by DBBPR83MB0507.EURPRD83.prod.outlook.com ([fe80::8fe5:5d42:6056:3ed7%8]) with mapi id 15.20.6023.004; Wed, 11 Jan 2023 09:04:56 +0000 From: Jelte Fennema To: Michael Paquier CC: "isaac.morland@gmail.com" , "pgsql-hackers@lists.postgresql.org" Subject: Re: [EXTERNAL] Re: [PATCH] Support using "all" for the db user in pg_ident.conf Thread-Topic: [EXTERNAL] Re: [PATCH] Support using "all" for the db user in pg_ident.conf Thread-Index: AQHZJZpa0Ar7nW43H0KRY7zP0P84bA== Date: Wed, 11 Jan 2023 09:04:56 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2023-01-11T09:04:55.448Z;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=microsoft.com; x-ms-publictraffictype: Email x-ms-traffictypediagnostic: DBBPR83MB0507:EE_|VI1PR83MB0478:EE_ x-ms-office365-filtering-correlation-id: 65bdc2c3-836e-46fd-d629-08daf3b2e8b8 x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: ip7/95lCvmQyOdmH2jc7KZbHSd4+q2N3xR135HKgJe1syPpjeiYswAKrZNJ9e1f1Z49AD6mapMw8mLioZhEBXICuqjpK8t1RkWsFMVm+gqBnTmoCBubq0TUb2Bv/Fvk3a2m1AATfv/aKI4WF4ZV4dg7Zs4Acwo7pawZPeFXTdBODdgvrh/dd6C2LI0hxZmPIbMOJDe7QNg32PqjMu9gJWlpf2iLC5Gv5u8VWztH9xaXM1qgCGrRyeUvFhOFuhPbnRvSuJcJGRDQzkYA1I1/hPwzW/7B+/JeIThyjCqMoACU7sQydSF8tVcjoZM3KQSd04ugzxGTYSVcX25YaPs/87guHCMZWb8IKtDyFQ49cBgeyvyxeGI1Luy6c6n9IyIK7t8r42t7KSKHEauzhIB/rrv137YSdhRAA8PQMbDgWkeOSL+PEHGsqfpz5IRj7GlU3UbFGJrGEOg5/UPqOKDvTqtrmnxzylnpyTK9WOUWbrGgcW8F8LF78GsBN0HZatboW+TmF38fhN8C+c+RlhHm3ioxT/3QNcHMcYGnXy9F2b6CfKYBjPawmKQqJS4fTUxq/wjMu81KAieOa7PI/dkB97EGUgBxmF3VaHG1HqgGzVsEXS9+T4N2PTFdA/xhYekk/lwefU6jpEXWYVDvBS/8Bm7B8sGhRbiprNjd3R7VxZiBz/RqScXQEMgkS7KPxB6ffTeK1Uu49XidWOI8JfLpZRUL3hjWDm4NILpLvxvPKw6I39fAeabPJ6g8gUk7BhB5L x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DBBPR83MB0507.EURPRD83.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230022)(4636009)(366004)(136003)(346002)(39860400002)(376002)(396003)(451199015)(54906003)(10290500003)(38100700002)(76116006)(66946007)(122000001)(64756008)(6916009)(91956017)(66446008)(66556008)(66476007)(4326008)(316002)(55016003)(8676002)(186003)(26005)(9686003)(6506007)(83380400001)(86362001)(478600001)(71200400001)(7696005)(33656002)(4744005)(8990500004)(5660300002)(2906002)(38070700005)(41300700001)(82950400001)(82960400001)(52536014)(8936002);DIR:OUT;SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?iso-8859-1?Q?06m1ufoy5FoYud8lpyYyDiWu9Lee7Vqyh/IegSEgEbbNNzmsH0ul8Z8PKM?= =?iso-8859-1?Q?QS6jofEg3kV154hEENGLocv+4+iPdeijKZs+WojlDpSx6tYtNjKo1eJ5j9?= =?iso-8859-1?Q?+HcsV/lKWLajqca78BS3dNABXoqEnsECmE0zea63s7AHt/8VgX6guvO4tV?= =?iso-8859-1?Q?dV4+28yEbOf6T8Pvux4bGkFZv2NFw4QT3Hg2lv3LNxJYdX3Ki0/KN8CX1f?= =?iso-8859-1?Q?K8xM/aBvW0OUdFAOk5cXYI5SaKXkk92ZjajbYHCtmZBcee15qyoPrUbFXo?= =?iso-8859-1?Q?pcYkVl88qXDtluMniVd8HsckeG69NZjNCca8Q3+GnRd/FNSO3xMb1TOJGC?= =?iso-8859-1?Q?bqgzYfYyCa4icq2ecIsokndzGbBvC7T6RRmWPuTV9KsNd0PLq5Qmba8XpV?= =?iso-8859-1?Q?VucPM9BCTCrjJ65HQzes4KtY26FHWJ4toGxYlh40V0mYeM+YhgWfeim+eO?= =?iso-8859-1?Q?vypS+zNpceLYpI1NZQad1UjHbjU1iPEd8B+nIV1Xp+2cMWxoXclqpSHBUw?= =?iso-8859-1?Q?lD8h5/Ao1Euy8RUXESkFpwB5YmNiVRlWEmYxJkeTy49XmT+T52XxjlgXjf?= =?iso-8859-1?Q?Biu1KvEOABX/qw9YA6Hcmcgb44pm24CcCrdKl2Oa2apowdfBwoeWbkMloU?= =?iso-8859-1?Q?VfuDv6/jweaHFiOywKRlldPjTkEyijcNFPm+8ZzgWrDHachqmNHggfxRKV?= =?iso-8859-1?Q?ZsCwHbD6dafS3JoLXbe6GR/m/2Io/GebKvrF4ehtmNmxFAuIEsNvgLzHCD?= =?iso-8859-1?Q?Rlb3r86cu1sp2f4BRnZR6OmuIQKLk+J43LkdzQhXyV+bpVR4ieE9G0sSi1?= =?iso-8859-1?Q?eDbgsyGdQOxJ2RxqFruWik9VVuYU7NT316C4agl0XotwynS8I66xCX/sr/?= =?iso-8859-1?Q?v4qYcEL7I7xKKQtrWj+8fwRNJ6SPNnBJFsOGuoCrpbVUkt2qe7rwkY+8Hy?= =?iso-8859-1?Q?Qbba0+tPrJ7CCva4OfnWaLxbIVKGwjIl6ef9YjWWiIjTEjhanU7shk0kFl?= =?iso-8859-1?Q?E+Qa2ZkOtsu+jx0ewTMS4i8juuL768+ymZQCAiQp3BHk1d7Tme7PElB72b?= =?iso-8859-1?Q?Y325BLE2MbI+D/ObbgX3kL3t6RH35yjoN3VhizDKTXz443a6vQ7mkOkbIc?= =?iso-8859-1?Q?Lq4yC/+/QgRqo5I9O2z9uSjirbRW1m3INltpvcyR2KlrExOBJHB8HnYU+D?= =?iso-8859-1?Q?tvkvyWgIk43vzSS79LG+VGJzRFKNpCdjfiMMPtvCDxU0ugIYL7H5iEfqGd?= =?iso-8859-1?Q?RPJ8QWhQPSpyvpnNbYy8PPA82I139an5u2f3ia+3WWsIEzdnbm7wHgHZbE?= =?iso-8859-1?Q?Z85bQwrrPtUcWRG5UP41PQvDnhk98sAUyB5Xq3KAITvgxEbSByhUJQS6jP?= =?iso-8859-1?Q?NZ3Sja85vONcoyi5v4q17vwVoXp9DYfSNR7QRzlp+dP0CKpOVDJpsjZcUh?= =?iso-8859-1?Q?jhDKoOpwbIutixASs6VgMdC/A0Tj30ZVeHzftghtiFu/ZKtSbitt3P6HPG?= =?iso-8859-1?Q?JNblpQObjuU4fQcyBFavloUMUZ0zBvnFXxMsdmABBmt6xgjtNpCooBQ7L9?= =?iso-8859-1?Q?Q3C33N/Le6ojCv+zmH/RxY/9AmV6WvKvP/ByxAoY8eESUr6QWc4KE5xp1t?= =?iso-8859-1?Q?dWbrbvPLWOUomaSuYjl257RlqHf9O05GFb?= Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DBBPR83MB0507.EURPRD83.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 65bdc2c3-836e-46fd-d629-08daf3b2e8b8 X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Jan 2023 09:04:56.0189 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: kOzhgtbRt7ePLUOZsDN9CiuJusvaSapPzA39nCEtq/sjMNxpruz/C/2D2Y2G+8wg+dLUXtGjm1R7Kb9pEgEmTw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR83MB0478 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk > The confusion that 0001 is addressing is fair (cough, fc579e1, cough),=0A= > still I am wondering whether we could do a bit better to be more=0A= =0A= Yeah, even after 0001 it's definitely suboptimal. I tried to keep the chang= es=0A= minimal to not distract from the main purpose of this patch. But I'll updat= e=0A= the patch to have some more. I'll respond to your other question first =0A= =0A= > In what is your proposal different from the following=0A= > entry in pg_ident.conf? As of:=0A= > mapname /^(.*)$ \1=0A= =0A= It's very different. I think easiest is to explain by example:=0A= =0A= If there exist three users on the postgres server: admin, jelte and michael= =0A= =0A= Then this rule (your suggested rule):=0A= mapname /^(.*)$ \1=0A= =0A= Is equivalent to:=0A= mapname admin admin=0A= mapname jelte jelte=0A= mapname michael michael=0A= =0A= While with the "all" keyword you can create a rule like this:=0A= mapname admin all=0A= =0A= which is equivalent to:=0A= mapname admin admin=0A= mapname admin jelte=0A= mapname admin michael=