From: Robert Treat <xzilla@users.sourceforge.net>
To: pgsql-hackers@postgresql.org
Cc: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Garick Hamlin <ghamlin@isc.upenn.edu>
Cc: pgsql-patches@postgresql.org
Subject: Re: Solaris ident authentication using unix domain sockets
Date: Sat, 05 Jul 2008 18:05:57 -0400
Message-ID: <200807051805.57381.xzilla@users.sourceforge.net> (raw)
In-Reply-To: <5091.1215108082@sss.pgh.pa.us>
References: <20080703165936.E80B312A5FFF@mx2.hub.org>
<20080703173628.GA1697@isc.upenn.edu>
<5091.1215108082@sss.pgh.pa.us>
On Thursday 03 July 2008 14:01:22 Tom Lane wrote:
> Garick Hamlin <ghamlin@isc.upenn.edu> writes:
> > I have a patch that I have been using to support postgresql's
> > notion of ident authentication when using unix domain sockets on
> > Solaris. This patch basically just adds support for using
> > getupeercred() on Solaris so unix sockets and ident auth works just
> > like it does on Linux and elsewhere.
>
> Cool.
>
Hmm... I've always been told that Solaris didn't support this because the
Solaris developers feel that IDENT is inherently insecure. If that is more
than just a philosphical opinion, I wonder if there should be additional
hurdles in place to enable this on that platform. Note that isn't an
objection from me, though I'm curious if any of the Sun guys want to chime in
on this.
--
Robert Treat
Build A Brighter LAMP :: Linux Apache {middleware} PostgreSQL
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-patches@postgresql.org
Cc: xzilla@users.sourceforge.net, pgsql-hackers@postgresql.org, tgl@sss.pgh.pa.us, ghamlin@isc.upenn.edu
Subject: Re: Solaris ident authentication using unix domain sockets
In-Reply-To: <200807051805.57381.xzilla@users.sourceforge.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox