From: Andrew Dunstan <andrew@dunslane.net>
To: Robert Treat <xzilla@users.sourceforge.net>
Cc: pgsql-hackers@postgresql.org, Tom Lane <tgl@sss.pgh.pa.us>
Cc: Garick Hamlin <ghamlin@isc.upenn.edu>
Cc: pgsql-patches@postgresql.org
Subject: Re: [PATCHES] Solaris ident authentication using unix domain sockets
Date: Sat, 05 Jul 2008 19:13:32 -0400
Message-ID: <4870001C.6060402@dunslane.net> (raw)
In-Reply-To: <200807051805.57381.xzilla@users.sourceforge.net>
References: <20080703165936.E80B312A5FFF@mx2.hub.org>
<20080703173628.GA1697@isc.upenn.edu>
<5091.1215108082@sss.pgh.pa.us>
<200807051805.57381.xzilla@users.sourceforge.net>
Robert Treat wrote:
> On Thursday 03 July 2008 14:01:22 Tom Lane wrote:
>
>> Garick Hamlin <ghamlin@isc.upenn.edu> writes:
>>
>>> I have a patch that I have been using to support postgresql's
>>> notion of ident authentication when using unix domain sockets on
>>> Solaris. This patch basically just adds support for using
>>> getupeercred() on Solaris so unix sockets and ident auth works just
>>> like it does on Linux and elsewhere.
>>>
>> Cool.
>>
>>
>
> Hmm... I've always been told that Solaris didn't support this because the
> Solaris developers feel that IDENT is inherently insecure. If that is more
> than just a philosphical opinion, I wonder if there should be additional
> hurdles in place to enable this on that platform. Note that isn't an
> objection from me, though I'm curious if any of the Sun guys want to chime in
> on this.
>
>
We don't actually use the Ident protocol for Unix sockets on any
platform. AIUI, this patch just implements what we do on platforms like
Linux or *BSD.
cheers
andrew
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-patches@postgresql.org
Cc: andrew@dunslane.net, xzilla@users.sourceforge.net, tgl@sss.pgh.pa.us, ghamlin@isc.upenn.edu
Subject: Re: [PATCHES] Solaris ident authentication using unix domain sockets
In-Reply-To: <4870001C.6060402@dunslane.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox