Re: BUG #6687: initdb -A ident can almost never be correct

Поиск
Список
Период
Сортировка
От David Fetter
Тема Re: BUG #6687: initdb -A ident can almost never be correct
Дата
Msg-id 20120611160142.GA5039@fetter.org
обсуждение исходный текст
Ответ на Re: BUG #6687: initdb -A ident can almost never be correct  (Magnus Hagander <magnus@hagander.net>)
Ответы Re: BUG #6687: initdb -A ident can almost never be correct  (Magnus Hagander <magnus@hagander.net>)
Список pgsql-bugs
On Mon, Jun 11, 2012 at 05:51:06PM +0200, Magnus Hagander wrote:
> On Mon, Jun 11, 2012 at 5:14 PM,  <david@fetter.org> wrote:
> > The following bug has been logged on the website:
> >
> > Bug reference: =A0 =A0 =A06687
> > Logged by: =A0 =A0 =A0 =A0 =A0David Fetter
> > Email address: =A0 =A0 =A0david@fetter.org
> > PostgreSQL version: 9.1.4
> > Operating system: =A0 All
> > Description:
> >
> > When calling initdb -A, it is assumed--wrongly in the case of ident, th=
at
> > every method is valid for both local and network.
>=20
> Um, what do you mean?
>=20
> If I specify initdb -A, it gives me peer on local and ident on tcp, is
> that not what you expected?
>=20
> Or maybe I'm misunderstanding the problem completely.. What is
> happening, and what are you expecting to happen?

We have a design issue, namely that initdb -A blindly applies the auth
method specified to all default accesses.  This is the correct
behavior for all auth methods except for ident, where it is wrong just
about everywhere for network (localhost rather than local) access.

I'm tempted to say it's always wrong for network access, only I know
someone will pipe up and talk about how they're running identd on some
legacy system.

Cheers,
David.
--=20
David Fetter <david@fetter.org> http://fetter.org/
Phone: +1 415 235 3778  AIM: dfetter666  Yahoo!: dfetter
Skype: davidfetter      XMPP: david.fetter@gmail.com
iCal: webcal://www.tripit.com/feed/ical/people/david74/tripit.ics

Remember to vote!
Consider donating to Postgres: http://www.postgresql.org/about/donate

В списке pgsql-bugs по дате отправления:

Предыдущее
От: Magnus Hagander
Дата:
Сообщение: Re: BUG #6687: initdb -A ident can almost never be correct
Следующее
От: Magnus Hagander
Дата:
Сообщение: Re: BUG #6687: initdb -A ident can almost never be correct