Re: Adding usernames to pg_hba.conf - Mailing list pgsql-patches

From Tom Lane
Subject Re: Adding usernames to pg_hba.conf
Date
Msg-id 29414.1016554522@sss.pgh.pa.us
Whole thread Raw
In response to Re: Adding usernames to pg_hba.conf  (Bruce Momjian <pgman@candle.pha.pa.us>)
Responses Re: Adding usernames to pg_hba.conf
List pgsql-patches
Bruce Momjian <pgman@candle.pha.pa.us> writes:
> I have been thinking about it and I think one file in data/global/
> similar to pg_pwd will work.

Yeah, if you model it on the pg_shadow trigger then at least it's no worse
than it is now ;-).  Note the checks that exist in the pg_shadow trigger
to require usernames not to contain any characters that would break the
file formatting; this will have to be done for groupnames now too.

Also note that (if you plan to write user names and not just user IDs)
an update of pg_shadow will need to force rewrite of the group file not
only the shadow file.

Thinking about that, I wonder why not stick to just one file: extend the
content of pg_pwd to include group membership info, and rewrite it when
either pg_shadow or pg_group changes.

            regards, tom lane

pgsql-patches by date:

Previous
From: Bruce Momjian
Date:
Subject: Re: [HACKERS] Fixes gram.y
Next
From: Bruce Momjian
Date:
Subject: Re: Adding usernames to pg_hba.conf