Re: [ADMIN] Passwords in clear text in server log - Mailing list pgsql-admin

From Williams, Alex
Subject Re: [ADMIN] Passwords in clear text in server log
Date
Msg-id CO2PR0501MB869B9177F792203DBE82FBAB04A0@CO2PR0501MB869.namprd05.prod.outlook.com
Whole thread Raw
In response to Re: [ADMIN] Passwords in clear text in server log  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: [ADMIN] Passwords in clear text in server log  ("Williams, Alex" <awilliams@teamdrg.com>)
List pgsql-admin

"We have heard many times from people who don't have enough insight, or
enough debug support client-side, to know exactly what queries their
apps are issuing.  Disabling query logging would be a horrible setback
for debuggability of such apps.  How many times have you said "consult
the postmaster log to find out what's going on"?
"


I completely agree. There are many cases, not just edge cases, where this has been vital to isolate and resolve issues.


From: pgsql-admin-owner@postgresql.org <pgsql-admin-owner@postgresql.org> on behalf of Tom Lane <tgl@sss.pgh.pa.us>
Sent: Wednesday, October 11, 2017 4:01:10 PM
To: Ervin Weber
Cc: Alvaro Herrera; Don Seiler; pgsql-admin
Subject: Re: [ADMIN] Passwords in clear text in server log
 
Ervin Weber <webervin@gmail.com> writes:
> Alvaro Herrera  wrote:
>> Actually, I do wonder why we log statements that fail to parse.  Surely
>> the client ought to know that it failed, but what is the value of
>> additionally storing the query in the server log?

> To debug clients who claim it is working on their end, but data does not change.

We have heard many times from people who don't have enough insight, or
enough debug support client-side, to know exactly what queries their
apps are issuing.  Disabling query logging would be a horrible setback
for debuggability of such apps.  How many times have you said "consult
the postmaster log to find out what's going on"?

                        regards, tom lane


--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin

pgsql-admin by date:

Previous
From: Don Seiler
Date:
Subject: Re: [ADMIN] Passwords in clear text in server log
Next
From: Stephen Frost
Date:
Subject: Re: [ADMIN] Passwords in clear text in server log