Re: security issues

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: security issues
Дата
Msg-id 70797.1639154487@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: security issues  (Laurenz Albe <laurenz.albe@cybertec.at>)
Список pgsql-admin
Laurenz Albe <laurenz.albe@cybertec.at> writes:
> On Fri, 2021-12-10 at 15:33 +0100, Frank Eckes wrote:
>> And even worse, if i define a foreign server (e.g ORACLE) everybody can 
>> see the credentials in a user mapping

> Then you use Oracle external authentication, for example with a
> secure key store on the PostgreSQL server.  Then you don't need a
> password.

That's one way, but AFAIK the above claim is nonsense.  You can
only see the connection options for user mappings that belong
to you (unless you're a superuser).

            regards, tom lane



В списке pgsql-admin по дате отправления:

Предыдущее
От: "David G. Johnston"
Дата:
Сообщение: Re: security issues
Следующее
От: Haroldo Stenger
Дата:
Сообщение: Re: security issues