Re: [PATCH] Log details for client certificate failures - Mailing list pgsql-hackers

From Andres Freund
Subject Re: [PATCH] Log details for client certificate failures
Date
Msg-id 20220719170954.nshvmok3tymxdpl3@awork3.anarazel.de
Whole thread Raw
In response to Re: [PATCH] Log details for client certificate failures  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: [PATCH] Log details for client certificate failures
List pgsql-hackers
Hi,

On 2022-07-19 12:39:43 -0400, Tom Lane wrote:
> Having said that, I struggle to see why we are panicking about badly
> encoded log data from this source while blithely ignoring the problems
> posed by non-ASCII role names, database names, and tablespace names.

I think we should fix these as well. I'm not as concerned about post-auth
encoding issues (i.e. tablespace name) as about pre-auth data (role name,
database name) - obviously being allowed to log in already is a pretty good
filter...

Greetings,

Andres Freund



pgsql-hackers by date:

Previous
From: Nathan Bossart
Date:
Subject: Re: Use "WAL segment" instead of "log segment" consistently in user-facing messages
Next
From: Bruce Momjian
Date:
Subject: Re: First draft of the PG 15 release notes