Thread: Streaming replication and privilege

Streaming replication and privilege

From
Fujii Masao
Date:
Hi,

Currently superuser privilege is required when the standby connects
to the primary. But there is the complaint that we should add new
privilege for replication and use it instead of superuser because
current approach is not good for security (*1). This has been listed
as one of TODO items of SR.

This TODO item really needs to be addressed for 9.0? Frankly I'm not
familiar with that area, so I've not work on it at all yet, but I'm
going to create the patch if many people want it for 9.0. What is
your opinion?

(*1)
http://archives.postgresql.org/pgsql-hackers/2010-01/msg01536.php

Regards,

-- 
Fujii Masao
NIPPON TELEGRAPH AND TELEPHONE CORPORATION
NTT Open Source Software Center


Re: Streaming replication and privilege

From
Robert Haas
Date:
On Thu, Mar 4, 2010 at 5:47 AM, Fujii Masao <masao.fujii@gmail.com> wrote:
> Currently superuser privilege is required when the standby connects
> to the primary. But there is the complaint that we should add new
> privilege for replication and use it instead of superuser because
> current approach is not good for security (*1). This has been listed
> as one of TODO items of SR.
>
> This TODO item really needs to be addressed for 9.0? Frankly I'm not
> familiar with that area, so I've not work on it at all yet, but I'm
> going to create the patch if many people want it for 9.0. What is
> your opinion?
>
> (*1)
> http://archives.postgresql.org/pgsql-hackers/2010-01/msg01536.php

In my opinion, it is a 9.1 item.

...Robert


Re: Streaming replication and privilege

From
Josh Berkus
Date:
On 3/4/10 2:47 AM, Fujii Masao wrote:
> This TODO item really needs to be addressed for 9.0? Frankly I'm not
> familiar with that area, so I've not work on it at all yet, but I'm
> going to create the patch if many people want it for 9.0. What is
> your opinion?

I think it falls under "nice to have, but not essential for 9.0".

--Josh Berkus


Re: Streaming replication and privilege

From
Fujii Masao
Date:
On Fri, Mar 5, 2010 at 3:14 AM, Josh Berkus <josh@agliodbs.com> wrote:
> On 3/4/10 2:47 AM, Fujii Masao wrote:
>> This TODO item really needs to be addressed for 9.0? Frankly I'm not
>> familiar with that area, so I've not work on it at all yet, but I'm
>> going to create the patch if many people want it for 9.0. What is
>> your opinion?
>
> I think it falls under "nice to have, but not essential for 9.0".

Agreed. I moved it from TODO list for v9.0 to that for future release.

Regards,

-- 
Fujii Masao
NIPPON TELEGRAPH AND TELEPHONE CORPORATION
NTT Open Source Software Center