Re: TODO Item: Allow pg_hba.conf to specify host names along with IP addresses - Mailing list pgsql-hackers

From Alvaro Herrera
Subject Re: TODO Item: Allow pg_hba.conf to specify host names along with IP addresses
Date
Msg-id 20080613201413.GD5070@alvh.no-ip.org
Whole thread Raw
In response to Re: TODO Item: Allow pg_hba.conf to specify host names along with IP addresses  (Andrew Sullivan <ajs@commandprompt.com>)
Responses Re: TODO Item: Allow pg_hba.conf to specify host names along with IP addresses  (Tom Lane <tgl@sss.pgh.pa.us>)
Re: TODO Item: Allow pg_hba.conf to specify host names along with IP addresses  (Andreas 'ads' Scherbaum <adsmail@wars-nicht.de>)
Re: TODO Item: Allow pg_hba.conf to specify host names along with IP addresses  (Peter Eisentraut <peter_e@gmx.net>)
List pgsql-hackers
Andrew Sullivan wrote:

> This is because DNS RRs have a TTL on them, so looking up the host at
> any moment other than when you're actually doing the authentication is
> prone to error.

Perhaps the solution to this problem is to do the lookups and store the
TTL of each answer.  At the time of actually checking you need only get
a new answer for those that expired.

-- 
Alvaro Herrera                                http://www.CommandPrompt.com/
PostgreSQL Replication, Consulting, Custom Development, 24x7 support


pgsql-hackers by date:

Previous
From: Simon Riggs
Date:
Subject: Re: Change lock requirements for adding a trigger
Next
From: James William Pye
Date:
Subject: Re: Options for protocol level cursors