Re: Why don't we allow DNS names in pg_hba.conf? - Mailing list pgsql-hackers

From Tom Lane
Subject Re: Why don't we allow DNS names in pg_hba.conf?
Date
Msg-id 29068.1139845719@sss.pgh.pa.us
Whole thread Raw
In response to Re: Why don't we allow DNS names in pg_hba.conf?  (mark@mark.mielke.cc)
List pgsql-hackers
mark@mark.mielke.cc writes:
> On Mon, Feb 13, 2006 at 10:00:34AM -0500, Andrew Dunstan wrote:
>> We can over-egg this pudding massively. I suggest we start with a simple 
>> implementation and see what needs it leaves unfilled. I would vote for 
>> allowing a hostname (or list of hostnames?) to replace the address/mask 
>> params, and that at connect time we do a forward lookup trying for a 
>> match with the connecting address. If we get a match then that's the hba 
>> line that applies.

> Yes.

The original proposal to change this required little more than removing
the AI_NUMERICHOST flag restricting pg_getaddrinfo_all's lookup.  I
thought all along that anything more than that was massive overdesign...
        regards, tom lane


pgsql-hackers by date:

Previous
From: mark@mark.mielke.cc
Date:
Subject: Re: Why don't we allow DNS names in pg_hba.conf?
Next
From: Dave Cramer
Date:
Subject: Re: what's stored in pg_tblspc