Adding encrypted identd authetification - Mailing list pgsql-hackers

From David M. Kaplan
Subject Adding encrypted identd authetification
Date
Msg-id 3D125BA9.9090904@ucdavis.edu
Whole thread Raw
Responses Re: Adding encrypted identd authetification  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-hackers
Hi,

I am about to add code to postgresql that would allow IDENT
authentification with DES encryption (as seen in the pidentd package
included with Redhat - not sure if same encryption is used by other
ident daemons).  The code would allow for two types of IDENT
authentification:

ident - this is the same as before, accept now it will try to decrypt
username if IDENT response is surrounded in braces.
ident-des - this will only allow encrypted IDENT responses.

Keys will be kept in a file: $PG_DATA/pg_ident.key.

The code will probably also require that UID's on the client machine and
in postgresql all correspond.  If not, a map could be used.

Does anyone have any suggestions about this?  Has anyone done this?

David





pgsql-hackers by date:

Previous
From: "Marc G. Fournier"
Date:
Subject: Re: Our archive searching stinks
Next
From: "Stephen"
Date:
Subject: Alter table drop column and background vacuum?