Re: host name support in pg_hba.conf

Поиск
Список
Период
Сортировка
От Stephen Frost
Тема Re: host name support in pg_hba.conf
Дата
Msg-id 20100809192949.GB26232@tamriel.snowman.net
обсуждение исходный текст
Ответ на Re: host name support in pg_hba.conf  ("Kevin Grittner" <Kevin.Grittner@wicourts.gov>)
Список pgsql-hackers
* Kevin Grittner (Kevin.Grittner@wicourts.gov) wrote:
> > The client's IP address (known from the kernel)
>
> Some machines have several IP addresses; how is that handled?

Sounds like he already described it, or I read it wrong.  The fact that
some machines have several IP addresses hardly matters- whatever IP is
used to connect to PG is what gets the reverse DNS lookup.  That then
returns a host.  That host is then looked up, and as long as *one* of
the IPs associated with that host matches the IP of the connector, it's
good to go.

> > is reverse looked up, which results in a host name.
>
> Some IP addresses have several host names, including in reverse
> lookup; how is that handled?

Yeahhhh...  That's just busted, imnsho.  But then, that's probably
because it breaks Kerberos too. :)
Thanks,
    Stephen

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Markus Wanner
Дата:
Сообщение: Re: dynamically allocating chunks from shared memory
Следующее
От: Robert Haas
Дата:
Сообщение: Re: security label support, part.2