Re: Why don't we allow DNS names in pg_hba.conf?

mark@mark.mielke.cc writes:
> On Mon, Feb 13, 2006 at 10:00:34AM -0500, Andrew Dunstan wrote:
>> We can over-egg this pudding massively. I suggest we start with a simple 
>> implementation and see what needs it leaves unfilled. I would vote for 
>> allowing a hostname (or list of hostnames?) to replace the address/mask 
>> params, and that at connect time we do a forward lookup trying for a 
>> match with the connecting address. If we get a match then that's the hba 
>> line that applies.

> Yes.

The original proposal to change this required little more than removing
the AI_NUMERICHOST flag restricting pg_getaddrinfo_all's lookup.  I
thought all along that anything more than that was massive overdesign...
        regards, tom lane