Re: [patch] fix dblink security hole

Поиск
Список
Период
Сортировка
От Tommy Gildseth
Тема Re: [patch] fix dblink security hole
Дата
Msg-id 48D806EB.4090001@usit.uio.no
обсуждение исходный текст
Ответ на Re: [patch] fix dblink security hole  (Tom Lane <tgl@sss.pgh.pa.us>)
Ответы Re: [patch] fix dblink security hole
Список pgsql-hackers
Tom Lane wrote:
> Joe Conway <mail@joeconway.com> writes:
>> Tom Lane wrote:
>>> No, the test to see if the server actually *asked* for the password is
>>> the important part at that end.
> 
>> Oh, I see that now. So yes, as far as I can tell, password_from_string 
>> is not used for anything anymore and should be removed.
> 
> Okay.  I just committed the patch without that change, but I'll go back
> and add it.


I'm not quite sure I fully understand the consequence of this change. 
Does it basically mean that it's not possible to use .pgpass with dblink 
for authentication?
The alternative then would be to hardcode the password in your stored 
procedures, or store it in a separate table somehow?


-- 
Tommy Gildseth


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Ron Mayer
Дата:
Сообщение: Re: Initial prefetch performance testing
Следующее
От: Simon Riggs
Дата:
Сообщение: Re: get_relation_stats_hook()