pg.ddx.io  pgsql-hackers@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Michael Paquier <michael@paquier.xyz>
To: Jacob Champion <jchampion@timescale.com>
Cc: pgsql-hackers@postgresql.org <pgsql-hackers@postgresql.org>
Cc: Aleksander Alekseev <aleksander@timescale.com>
Cc: Peter Eisentraut <peter.eisentraut@enterprisedb.com>
Cc: David G. Johnston <david.g.johnston@gmail.com>
Subject: Re: [PoC] Let libpq reject unexpected authentication requests
Date: Sat, 25 Mar 2023 11:59:10 +0900
Message-ID: <ZB5jftra/n2TbdLx@paquier.xyz> (raw)
In-Reply-To: <CAAWbhmjuziAVC7AUEQ7N8odPQb54caxKsec+646aqA2xGx6y-g@mail.gmail.com>
References: <c136387c-731e-729b-a49f-c1f17768aaf0@timescale.com>
	<ZAu4rdSKQTHvBqS7@paquier.xyz>
	<CAAWbhmgNoAp2gfdzrH0BmYbmsMo-k4FjN2OAhtLm0VjaS_9=Cg@mail.gmail.com>
	<CAAWbhmg+GzNMK5Li182BKSbzoFVaKk_dDJ628NnuV80GqYgFFg@mail.gmail.com>
	<ZBAIe1gnGxknLT7t@paquier.xyz>
	<CAAWbhmiotN3k6q5Q5SnPe=5P1V8Vq=XKkuZQf5UprPhNiUAv_A@mail.gmail.com>
	<ZBqZl+mTiHqWJ2Yr@paquier.xyz>
	<CAAWbhmjoOzcwXvOjhBf7gP1WFirL+JDMnDWT76ocozt_x-UJVQ@mail.gmail.com>
	<ZB0yitjRNWE9Aimc@paquier.xyz>
	<CAAWbhmjuziAVC7AUEQ7N8odPQb54caxKsec+646aqA2xGx6y-g@mail.gmail.com>

On Fri, Mar 24, 2023 at 09:30:06AM -0700, Jacob Champion wrote:
> On Thu, Mar 23, 2023 at 10:18 PM Michael Paquier <michael@paquier.xyz> wrote:
>> I have spent a couple of hours looking at the whole again today,
>> testing that with OpenSSL to make sure that everything was OK.  Apart
>> from a few tweaks, that seemed pretty good.  So, applied.
> 
> Thank you!

Please note that the CF entry has been marked as committed.  We should
really do something about having a cleaner separation between SASL,
the mechanisms and the AUTH_REQ_* codes, in the long term, though
honestly I don't know yet what would be the most elegant and the least
error-prone approach.  And for anything that touches authentication,
simpler means better.
--
Michael

Attachments:

  signature.asc (application/pgp-signature, 832B) download

view thread (64+ messages)  latest in thread

Message-ID: <ZB5jftra/n2TbdLx@paquier.xyz>
Permalink:  ../ZB5jftra%2Fn2TbdLx@paquier.xyz/
Also on:    postgresql.org/message-id/ZB5jftra/n2TbdLx@paquier.xyz

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-hackers@postgresql.org
  Cc: michael@paquier.xyz, jchampion@timescale.com, aleksander@timescale.com, peter.eisentraut@enterprisedb.com, david.g.johnston@gmail.com
  Subject: Re: [PoC] Let libpq reject unexpected authentication requests
  In-Reply-To: <ZB5jftra/n2TbdLx@paquier.xyz>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox