Re: Thoughts on pg_hba.conf rejection - Mailing list pgsql-hackers

From Robert Haas
Subject Re: Thoughts on pg_hba.conf rejection
Date
Msg-id u2o603c8f071004141722s9fa2f97dtd9d0bec3a6d0dff7@mail.gmail.com
Whole thread Raw
In response to Re: Thoughts on pg_hba.conf rejection  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: Thoughts on pg_hba.conf rejection  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-hackers
On Wed, Apr 14, 2010 at 8:19 PM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
> I'm thinking there isn't anything much we can do here without using a
> different message wording for a match to a REJECT entry.  So it's a
> straight-up tradeoff of possible security information leakage against
> whether a different wording is really helpful to the admin.  Both of
> those seem like fairly marginal concerns, really, so I'm having a hard
> time deciding which one ought to win.  But given that nobody complained
> before this, is it worth changing?

What's wrong with something like "connection not permitted" or
"connection not authorized"?

...Robert


pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: Thoughts on pg_hba.conf rejection
Next
From: Tom Lane
Date:
Subject: Re: Thoughts on pg_hba.conf rejection