From: Josh Berkus <josh@agliodbs.com>
To: Florian G. Pflug <fgp@phlo.org>
Cc: pgsql-hackers@postgresql.org, Tom Lane <tgl@sss.pgh.pa.us>
Cc: Andrew Dunstan <andrew@dunslane.net>
Cc: Robert Treat <xzilla@users.sourceforge.net>
Cc: Garick Hamlin <ghamlin@isc.upenn.edu>
Cc: pgsql-patches@postgresql.org
Subject: Re: [PATCHES] Solaris ident authentication using unix domain sockets
Date: Wed, 09 Jul 2008 10:55:24 -0700
Message-ID: <4874FB8C.9090701@agliodbs.com> (raw)
In-Reply-To: <4873BC28.3070507@phlo.org>
References: <20080703165936.E80B312A5FFF@mx2.hub.org>
<4870001C.6060402@dunslane.net>
<23040.1215319905@sss.pgh.pa.us>
<200807080935.33186.josh@agliodbs.com>
<4873BC28.3070507@phlo.org>
Florian,
> I'd be *very* interested in how they come to that assessment. I'd have
> thought that the only alternative to getpeereid/getupeercred is
> password-based or certificate-based authenticated - which seem *less*
> secure because a) they also rely on the client having the correct uid
> or gid (to read the password/private key), plus b) the risk of the
> password/private key getting into the wrong hands.
*shrug* don't ask me. I don't agree with the policy, I can hardly
defend it.
--Josh
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-patches@postgresql.org
Cc: josh@agliodbs.com, fgp@phlo.org, tgl@sss.pgh.pa.us, andrew@dunslane.net, xzilla@users.sourceforge.net, ghamlin@isc.upenn.edu
Subject: Re: [PATCHES] Solaris ident authentication using unix domain sockets
In-Reply-To: <4874FB8C.9090701@agliodbs.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox