Re: pg_hba.conf hostname todo - Mailing list pgsql-hackers

From Tom Lane
Subject Re: pg_hba.conf hostname todo
Date
Msg-id 25418.1167261458@sss.pgh.pa.us
Whole thread Raw
In response to Re: pg_hba.conf hostname todo  (Stephen Frost <sfrost@snowman.net>)
List pgsql-hackers
Stephen Frost <sfrost@snowman.net> writes:
> While a wildcard does make sense (ie: www*.postgresql.org), I would
> generally expect 'commandprompt.com' to mean '*.commandprompt.com'
> implicitly.

No, that would be a really bad idea.  It's not unlikely that
commandprompt.com refers to a specific host.  If you implicitly allow it
to match *.commandprompt.com then there's no way to specify "connections
from just this host, not the whole domain underneath it".

I'm not sure that DNS wildcards are appropriate at all, but if they are
we should definitely require them to be written as explicit wildcards,
not have that happen silently behind the DBA's back.
        regards, tom lane


pgsql-hackers by date:

Previous
From: "Simon Riggs"
Date:
Subject: Re: TupleDescs and refcounts and such, again
Next
From: Tom Lane
Date:
Subject: Re: [PATCHES] [BUGS] BUG #2846: inconsistent and confusing handling of underflows,