Re: [HACKERS] Solaris ident authentication using unix domain sockets

Поиск
Список
Период
Сортировка
От Garick Hamlin
Тема Re: [HACKERS] Solaris ident authentication using unix domain sockets
Дата
Msg-id 20080703185533.GA1927@isc.upenn.edu
обсуждение исходный текст
Ответ на Re: [HACKERS] Solaris ident authentication using unix domain sockets  (Tom Lane <tgl@sss.pgh.pa.us>)
Ответы Re: [HACKERS] Solaris ident authentication using unix domain sockets  (Bruce Momjian <bruce@momjian.us>)
Список pgsql-patches
On Thu, Jul 03, 2008 at 02:01:22PM -0400, Tom Lane wrote:
> Garick Hamlin <ghamlin@isc.upenn.edu> writes:
> >       I have a patch that I have been using to support postgresql's
> > notion of ident authentication when using unix domain sockets on
> > Solaris.  This patch basically just adds support for using
> > getupeercred() on Solaris so unix sockets and ident auth works just
> > like it does on Linux and elsewhere.
>
> Cool.
>
> > + #if defined(HAVE_GETPEERUCRED)
> > + #include <ucred.h>
> > + #endif
>
> But this is not cool.  There might be systems out there that have
> getpeerucred() but not <ucred.h>, and this coding would cause a compile
> failure (even if they actually wouldn't be trying to use getpeerucred()
> because they have some other way to do it).  You need an explicit
> configure probe for the header file too, I think.
Ok, I can fix that.
>
> Also, what is the rationale for putting this before the
> HAVE_STRUCT_CMSGCRED case instead of after?  Again, that seems like it
> could cause unexpected behavioral changes on platforms that work fine
> now (consider possibility that getpeerucred is there but broken).
Good Point, It should be the other way.
>
>                         regards, tom lane

Thanks,

Garick

В списке pgsql-patches по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: [HACKERS] Solaris ident authentication using unix domain sockets
Следующее
От: Tom Lane
Дата:
Сообщение: Re: Exposing keywords to clients