Re: Proposal: BSD Authentication support - Mailing list pgsql-hackers

From Peter Eisentraut
Subject Re: Proposal: BSD Authentication support
Date
Msg-id 56E383B4.80509@gmx.net
Whole thread Raw
In response to Re: Proposal: BSD Authentication support  (Marisa Emerson <mje@insec.sh>)
List pgsql-hackers
On 1/7/16 9:40 PM, Marisa Emerson wrote:
> There's a port for PAM, but we would prefer to use BSD Auth as its quite
> a lot cleaner and is standard on OpenBSD.
> 
> I've attached an updated patch that includes documentation. It has been
> tested against OpenBSD 5.8. I'll add this thread to the commitfest.

(Not a BSD user, just reviewing the code.)

configure.in has "build with BSD support", which should be "build with
BSD Authentication support".

There should be some documentation of the new configure option in
installation.sgml.

The documentation in client-auth.sgml speaks of a postgresql user and an
auth group.  Maybe that's clear to users of BSD, but I don't know
whether these are OS entities or groups that I need to create or what.

The auth_userokay() call hardcodes a "type" of "pg-auth".  That seems
important and should probably be documented.  Extrapolating from PAM, I
think that should perhaps be an option in pg_hba.conf.




pgsql-hackers by date:

Previous
From: Dilip Kumar
Date:
Subject: Re: Relation extension scalability
Next
From: Peter Eisentraut
Date:
Subject: Re: Proposal: BSD Authentication support