From: Garick Hamlin <ghamlin@isc.upenn.edu>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: pgsql-hackers@postgresql.org <pgsql-hackers@postgresql.org>
Cc: pgsql-patches@postgresql.org <pgsql-patches@postgresql.org>
Subject: Re: Solaris ident authentication using unix domain sockets
Date: Thu, 3 Jul 2008 14:55:33 -0400
Message-ID: <20080703185533.GA1927@isc.upenn.edu> (raw)
In-Reply-To: <5091.1215108082@sss.pgh.pa.us>
References: <20080703165936.E80B312A5FFF@mx2.hub.org>
<20080703173628.GA1697@isc.upenn.edu>
<5091.1215108082@sss.pgh.pa.us>
On Thu, Jul 03, 2008 at 02:01:22PM -0400, Tom Lane wrote:
> Garick Hamlin <ghamlin@isc.upenn.edu> writes:
> > I have a patch that I have been using to support postgresql's
> > notion of ident authentication when using unix domain sockets on
> > Solaris. This patch basically just adds support for using
> > getupeercred() on Solaris so unix sockets and ident auth works just
> > like it does on Linux and elsewhere.
>
> Cool.
>
> > + #if defined(HAVE_GETPEERUCRED)
> > + #include <ucred.h>
> > + #endif
>
> But this is not cool. There might be systems out there that have
> getpeerucred() but not <ucred.h>, and this coding would cause a compile
> failure (even if they actually wouldn't be trying to use getpeerucred()
> because they have some other way to do it). You need an explicit
> configure probe for the header file too, I think.
Ok, I can fix that.
>
> Also, what is the rationale for putting this before the
> HAVE_STRUCT_CMSGCRED case instead of after? Again, that seems like it
> could cause unexpected behavioral changes on platforms that work fine
> now (consider possibility that getpeerucred is there but broken).
Good Point, It should be the other way.
>
> regards, tom lane
Thanks,
Garick
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-patches@postgresql.org
Cc: ghamlin@isc.upenn.edu, tgl@sss.pgh.pa.us, pgsql-hackers@postgresql.org
Subject: Re: Solaris ident authentication using unix domain sockets
In-Reply-To: <20080703185533.GA1927@isc.upenn.edu>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox