Received: from localhost (unknown [200.46.204.183]) by postgresql.org (Postfix) with ESMTP id 01530650060 for ; Sun, 6 Jul 2008 01:51:53 -0300 (ADT) Received: from postgresql.org ([200.46.204.86]) by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 28059-10 for ; Sun, 6 Jul 2008 01:51:49 -0300 (ADT) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from sss.pgh.pa.us (sss.pgh.pa.us [66.207.139.130]) by postgresql.org (Postfix) with ESMTP id 8724E650050 for ; Sun, 6 Jul 2008 01:51:50 -0300 (ADT) Received: from sss2.sss.pgh.pa.us (tgl@localhost [127.0.0.1]) by sss.pgh.pa.us (8.14.2/8.14.2) with ESMTP id m664pjra023041; Sun, 6 Jul 2008 00:51:45 -0400 (EDT) To: Andrew Dunstan cc: Robert Treat , pgsql-hackers@postgresql.org, Garick Hamlin , pgsql-patches@postgresql.org Subject: Re: [PATCHES] Solaris ident authentication using unix domain sockets In-reply-to: <4870001C.6060402@dunslane.net> References: <20080703165936.E80B312A5FFF@mx2.hub.org> <20080703173628.GA1697@isc.upenn.edu> <5091.1215108082@sss.pgh.pa.us> <200807051805.57381.xzilla@users.sourceforge.net> <4870001C.6060402@dunslane.net> Comments: In-reply-to Andrew Dunstan message dated "Sat, 05 Jul 2008 19:13:32 -0400" Date: Sun, 06 Jul 2008 00:51:45 -0400 Message-ID: <23040.1215319905@sss.pgh.pa.us> From: Tom Lane X-Virus-Scanned: Maia Mailguard 1.0.1 X-Archive-Number: 200807/251 X-Sequence-Number: 120511 Andrew Dunstan writes: > Robert Treat wrote: >> Hmm... I've always been told that Solaris didn't support this because the >> Solaris developers feel that IDENT is inherently insecure. > We don't actually use the Ident protocol for Unix sockets on any > platform. Indeed. If the Solaris folk feel that getupeercred() is insecure, they had better explain why their kernel is that broken. This is entirely unrelated to the known shortcomings of the "ident" IP protocol. regards, tom lane