Re: Logging of matching pg_hba.conf entry during auth skips trust auth, potential security issue

Поиск
Список
Период
Сортировка
Искать
От
Michael Paquier
Тема
Re: Logging of matching pg_hba.conf entry during auth skips trust auth, potential security issue
Дата
Msg-id
ZOKogxFDNYwwbS27@paquier.xyz
Ответ на
Список
Дерево обсуждения
Logging of matching pg_hba.conf entry during auth skips trust auth, potential security issue Shaun Thomas <shaun.thomas@enterprisedb.com>
Re: Logging of matching pg_hba.conf entry during auth skips trust auth, potential security issue Michael Paquier <michael@paquier.xyz>
Re: Logging of matching pg_hba.conf entry during auth skips trust auth, potential security issue Jacob Champion <jchampion@timescale.com>
Re: Logging of matching pg_hba.conf entry during auth skips trust auth, potential security issue Michael Paquier <michael@paquier.xyz>
Re: Logging of matching pg_hba.conf entry during auth skips trust auth, potential security issue Shaun Thomas <shaun.thomas@enterprisedb.com>
Re: Logging of matching pg_hba.conf entry during auth skips trust auth, potential security issue Jacob Champion <jchampion@timescale.com>
Re: Logging of matching pg_hba.conf entry during auth skips trust auth, potential security issue Stephen Frost <sfrost@snowman.net>
Re: Logging of matching pg_hba.conf entry during auth skips trust auth, potential security issue Jacob Champion <jchampion@timescale.com>
Re: Logging of matching pg_hba.conf entry during auth skips trust auth, potential security issue Stephen Frost <sfrost@snowman.net>
Re: Logging of matching pg_hba.conf entry during auth skips trust auth, potential security issue Jacob Champion <jchampion@timescale.com>
Re: Logging of matching pg_hba.conf entry during auth skips trust auth, potential security issue Robert Haas <robertmhaas@gmail.com>
Re: Logging of matching pg_hba.conf entry during auth skips trust auth, potential security issue Stephen Frost <sfrost@snowman.net>
Re: Logging of matching pg_hba.conf entry during auth skips trust auth, potential security issue Michael Paquier <michael@paquier.xyz>
Re: Logging of matching pg_hba.conf entry during auth skips trust auth, potential security issue Michael Paquier <michael@paquier.xyz>
Re: Logging of matching pg_hba.conf entry during auth skips trust auth, potential security issue Robert Haas <robertmhaas@gmail.com>
Re: Logging of matching pg_hba.conf entry during auth skips trust auth, potential security issue Michael Paquier <michael@paquier.xyz>
Re: Logging of matching pg_hba.conf entry during auth skips trust auth, potential security issue Jacob Champion <jchampion@timescale.com>
Re: Logging of matching pg_hba.conf entry during auth skips trust auth, potential security issue Michael Paquier <michael@paquier.xyz>
Re: Logging of matching pg_hba.conf entry during auth skips trust auth, potential security issue Jacob Champion <jchampion@timescale.com>
Re: Logging of matching pg_hba.conf entry during auth skips trust auth, potential security issue Michael Paquier <michael@paquier.xyz>
Re: Logging of matching pg_hba.conf entry during auth skips trust auth, potential security issue Isaac Morland <isaac.morland@gmail.com>
Re: Logging of matching pg_hba.conf entry during auth skips trust auth, potential security issue Michael Paquier <michael@paquier.xyz>
On Fri, Aug 18, 2023 at 08:49:16AM +0900, Michael Paquier wrote:
> After sleeping on it, I think that I'd just agree with Robert's point
> to just use the same language as the message, while also agreeing with
> the patch to not set MyClientConnectionInfo.authn_id in the uaTrust
> case, only logging something under log_connections.
> 
> +        * No authentication was actually performed; this happens e.g. when the
> +        * trust method is in use.
> 
> This comment should be reworded a bit, say "No authentication identity
> was set; blah ..".

Attached is a v3 to do these two things, with adjustments for two SSL
tests.  Any objections about it?

(Note: no backpatch)
--
Michael
В списке pgsql-hackers по дате отправления
От: Peter Geoghegan
Дата:
От: Peter Smith
Дата:
FAQ