Thread: Streaming replication and privilege
Hi, Currently superuser privilege is required when the standby connects to the primary. But there is the complaint that we should add new privilege for replication and use it instead of superuser because current approach is not good for security (*1). This has been listed as one of TODO items of SR. This TODO item really needs to be addressed for 9.0? Frankly I'm not familiar with that area, so I've not work on it at all yet, but I'm going to create the patch if many people want it for 9.0. What is your opinion? (*1) http://archives.postgresql.org/pgsql-hackers/2010-01/msg01536.php Regards, -- Fujii Masao NIPPON TELEGRAPH AND TELEPHONE CORPORATION NTT Open Source Software Center
On Thu, Mar 4, 2010 at 5:47 AM, Fujii Masao <masao.fujii@gmail.com> wrote: > Currently superuser privilege is required when the standby connects > to the primary. But there is the complaint that we should add new > privilege for replication and use it instead of superuser because > current approach is not good for security (*1). This has been listed > as one of TODO items of SR. > > This TODO item really needs to be addressed for 9.0? Frankly I'm not > familiar with that area, so I've not work on it at all yet, but I'm > going to create the patch if many people want it for 9.0. What is > your opinion? > > (*1) > http://archives.postgresql.org/pgsql-hackers/2010-01/msg01536.php In my opinion, it is a 9.1 item. ...Robert
On 3/4/10 2:47 AM, Fujii Masao wrote: > This TODO item really needs to be addressed for 9.0? Frankly I'm not > familiar with that area, so I've not work on it at all yet, but I'm > going to create the patch if many people want it for 9.0. What is > your opinion? I think it falls under "nice to have, but not essential for 9.0". --Josh Berkus
On Fri, Mar 5, 2010 at 3:14 AM, Josh Berkus <josh@agliodbs.com> wrote: > On 3/4/10 2:47 AM, Fujii Masao wrote: >> This TODO item really needs to be addressed for 9.0? Frankly I'm not >> familiar with that area, so I've not work on it at all yet, but I'm >> going to create the patch if many people want it for 9.0. What is >> your opinion? > > I think it falls under "nice to have, but not essential for 9.0". Agreed. I moved it from TODO list for v9.0 to that for future release. Regards, -- Fujii Masao NIPPON TELEGRAPH AND TELEPHONE CORPORATION NTT Open Source Software Center