Re: Re: [PATCHES] Allow IDENT authentication on local connections (Linux only) - Mailing list pgsql-hackers

From Bruce Momjian
Subject Re: Re: [PATCHES] Allow IDENT authentication on local connections (Linux only)
Date
Msg-id 200108060255.f762tmx16675@candle.pha.pa.us
Whole thread Raw
In response to Re: [PATCHES] Allow IDENT authentication on local connections (Linux only)  (Peter Eisentraut <peter_e@gmx.net>)
List pgsql-hackers
> Tom Lane writes:
> 
> > Well, we need to talk about that.  I like your idea of making ident auth
> > "just work" on local connections better than Oliver's approach of
> > inventing a separate auth-type keyword.
> 
> This is exactly what I would not like to see.  "ident" defines a specific
> protocol, with an ident server.  ident over something not TCP/IP doesn't
> make sense, it could confuse admins.  Just because it works similar
> doesn't mean it is the same.  In particular, the security issues are
> completely different.

Peter has a point here.  The only way to save the 'ident' keyword is to
make it mean 'auto-identify' rather than identd.

--  Bruce Momjian                        |  http://candle.pha.pa.us pgman@candle.pha.pa.us               |  (610)
853-3000+  If your life is a hard drive,     |  830 Blythe Avenue +  Christ can be your backup.        |  Drexel Hill,
Pennsylvania19026
 


pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: partial index
Next
From: Grant
Date:
Subject: Vim!