Date: Sat, 05 Jul 2008 18:05:57 -0400
From: Robert Treat <xzilla@users.sourceforge.net>
Subject: Re: Solaris ident authentication using unix domain sockets
In-reply-to: <5091.1215108082@sss.pgh.pa.us>
To: pgsql-hackers@postgresql.org
Cc: Tom Lane <tgl@sss.pgh.pa.us>, Garick Hamlin <ghamlin@isc.upenn.edu>,
	pgsql-patches@postgresql.org
Message-id: <200807051805.57381.xzilla@users.sourceforge.net>
MIME-version: 1.0
Content-type: text/plain; charset=iso-8859-15
Content-transfer-encoding: 7bit
Content-disposition: inline
References: <20080703165936.E80B312A5FFF@mx2.hub.org>
	<20080703173628.GA1697@isc.upenn.edu> <5091.1215108082@sss.pgh.pa.us>
User-Agent: KMail/1.9.9

On Thursday 03 July 2008 14:01:22 Tom Lane wrote:
> Garick Hamlin <ghamlin@isc.upenn.edu> writes:
> > 	I have a patch that I have been using to support postgresql's
> > notion of ident authentication when using unix domain sockets on
> > Solaris.  This patch basically just adds support for using
> > getupeercred() on Solaris so unix sockets and ident auth works just
> > like it does on Linux and elsewhere.
>
> Cool.
>

Hmm... I've always been told that Solaris didn't support this because the 
Solaris developers feel that IDENT is inherently insecure. If that is more 
than just a philosphical opinion, I wonder if there should be additional 
hurdles in place to enable this on that platform. Note that isn't an 
objection from me, though I'm curious if any of the Sun guys want to chime in 
on this. 

-- 
Robert Treat
Build A Brighter LAMP :: Linux Apache {middleware} PostgreSQL