From: Tom Lane <tgl@sss.pgh.pa.us>
To: Andrew Dunstan <andrew@dunslane.net>
Cc: Robert Treat <xzilla@users.sourceforge.net>
Cc: pgsql-hackers@postgresql.org, Garick Hamlin <ghamlin@isc.upenn.edu>
Cc: pgsql-patches@postgresql.org
Subject: Re: [PATCHES] Solaris ident authentication using unix domain sockets
Date: Sun, 06 Jul 2008 00:51:45 -0400
Message-ID: <23040.1215319905@sss.pgh.pa.us> (raw)
In-Reply-To: <4870001C.6060402@dunslane.net>
References: <20080703165936.E80B312A5FFF@mx2.hub.org>
<20080703173628.GA1697@isc.upenn.edu>
<5091.1215108082@sss.pgh.pa.us>
<200807051805.57381.xzilla@users.sourceforge.net>
<4870001C.6060402@dunslane.net>
Andrew Dunstan <andrew@dunslane.net> writes:
> Robert Treat wrote:
>> Hmm... I've always been told that Solaris didn't support this because the
>> Solaris developers feel that IDENT is inherently insecure.
> We don't actually use the Ident protocol for Unix sockets on any
> platform.
Indeed. If the Solaris folk feel that getupeercred() is insecure,
they had better explain why their kernel is that broken. This is
entirely unrelated to the known shortcomings of the "ident" IP
protocol.
regards, tom lane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-patches@postgresql.org
Cc: tgl@sss.pgh.pa.us, andrew@dunslane.net, xzilla@users.sourceforge.net, ghamlin@isc.upenn.edu
Subject: Re: [PATCHES] Solaris ident authentication using unix domain sockets
In-Reply-To: <23040.1215319905@sss.pgh.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox