Re: [PATCHES] Allow IDENT authentication on local connections (Linux only) - Mailing list pgsql-hackers

From Bruce Momjian
Subject Re: [PATCHES] Allow IDENT authentication on local connections (Linux only)
Date
Msg-id 200108021522.f72FMog26263@candle.pha.pa.us
Whole thread Raw
In response to Re: [PATCHES] Allow IDENT authentication on local connections (Linux only)  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-hackers
> Ah, now I understand: those references I saw mention the existence of
> the underlying SCM_CREDENTIALS (or whatever it's called) message type,
> not the SO_PEERCRED getsockopt facility.

Yes!  That was it the Solaris patch I remember, SCM_CREDENTIALS.

> I agree that it's not worth pursuing at the moment.  A localized change
> in the backend is one thing, but an OS-specific addition to our client-
> visible authentication protocol would be a lot bigger change, and a lot
> more debatable.  If we get a larger/more active Solaris user community,
> maybe someone will be motivated to do it.

Yes.  It is part of that whole SvR4 API that allowed you to push file
descriptors to other processes and stuff like that.

--  Bruce Momjian                        |  http://candle.pha.pa.us pgman@candle.pha.pa.us               |  (610)
853-3000+  If your life is a hard drive,     |  830 Blythe Avenue +  Christ can be your backup.        |  Drexel Hill,
Pennsylvania19026
 


pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: [PATCHES] Allow IDENT authentication on local connections (Linux only)
Next
From: Bruce Momjian
Date:
Subject: Re: plpgsql: RAISE