Re: Parsing of pg_hba.conf and authentication inconsistencies - Mailing list pgsql-hackers

From Joshua D. Drake
Subject Re: Parsing of pg_hba.conf and authentication inconsistencies
Date
Msg-id 48949756.9030701@commandprompt.com
Whole thread Raw
In response to Re: Parsing of pg_hba.conf and authentication inconsistencies  (Alvaro Herrera <alvherre@commandprompt.com>)
Responses Re: Parsing of pg_hba.conf and authentication inconsistencies  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-hackers
Alvaro Herrera wrote:
> Tom Lane wrote:
> 
>> Idle thought: maybe what would really make sense here is a "lint"
>> for PG config files, which you'd run as a standalone program and
>> which would look for not only clear errors but questionable things
>> to warn about.  For instance it might notice multiple pg_hba.conf
>> entries for the same IP addresses, check whether an LDAP server
>> can be connected to, check that all user/group/database names
>> used in the file actually exist, etc.  These are things that we'd
>> certainly not put into any load- or reload-time tests.
> 
> I like this idea.
> 
> postgres --check-hba-file /path/to/hba.conf
> postgres --check-conf-file /path/to/postgresql.conf
> 
> (I think it's better to reuse the same postmaster executable, because
> that way it's easier to have the same parsing routines.)

Change that to pg_ctl and you have a deal :)

Joshua D. Drake




pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: Parsing of pg_hba.conf and authentication inconsistencies
Next
From: "Joshua D. Drake"
Date:
Subject: Re: Parsing of pg_hba.conf and authentication inconsistencies