Received: from localhost (unknown [200.46.204.183]) by postgresql.org (Postfix) with ESMTP id 7D3F2650138; Tue, 8 Jul 2008 13:35:55 -0300 (ADT) Received: from postgresql.org ([200.46.204.86]) by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 36909-07; Tue, 8 Jul 2008 13:35:50 -0300 (ADT) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from davinci.ethosmedia.com (unknown [209.128.84.227]) by postgresql.org (Postfix) with ESMTP id 01217650319; Tue, 8 Jul 2008 13:35:05 -0300 (ADT) X-EthosMedia-Virus-Scanned: no infections found Received: from [63.195.55.98] (account josh@agliodbs.com HELO [192.168.2.3]) by davinci.ethosmedia.com (CommuniGate Pro SMTP 4.1.8) with ESMTP id 17197296; Tue, 08 Jul 2008 09:35:11 -0700 From: Josh Berkus Organization: PostgreSQL @ Sun To: pgsql-hackers@postgresql.org Subject: Re: [PATCHES] Solaris ident authentication using unix domain sockets Date: Tue, 8 Jul 2008 09:35:32 -0700 User-Agent: KMail/1.8.2 Cc: Tom Lane , Andrew Dunstan , Robert Treat , Garick Hamlin , pgsql-patches@postgresql.org References: <20080703165936.E80B312A5FFF@mx2.hub.org> <4870001C.6060402@dunslane.net> <23040.1215319905@sss.pgh.pa.us> In-Reply-To: <23040.1215319905@sss.pgh.pa.us> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200807080935.33186.josh@agliodbs.com> X-Virus-Scanned: Maia Mailguard 1.0.1 X-Archive-Number: 200807/413 X-Sequence-Number: 120673 Tom, > Indeed. If the Solaris folk feel that getupeercred() is insecure, > they had better explain why their kernel is that broken. This is > entirely unrelated to the known shortcomings of the "ident" IP > protocol. The Solaris security & kernel folks do, actually. However, there's no question that TRUST is inherently insecure, and that's what people are going to use if they can't get IDENT to work. -- Josh Berkus PostgreSQL @ Sun San Francisco