Re: Thoughts on pg_hba.conf rejection

Поиск
Список
Период
Сортировка
От Robert Haas
Тема Re: Thoughts on pg_hba.conf rejection
Дата
Msg-id u2o603c8f071004141722s9fa2f97dtd9d0bec3a6d0dff7@mail.gmail.com
обсуждение исходный текст
Ответ на Re: Thoughts on pg_hba.conf rejection  (Tom Lane <tgl@sss.pgh.pa.us>)
Ответы Re: Thoughts on pg_hba.conf rejection
Список pgsql-hackers
On Wed, Apr 14, 2010 at 8:19 PM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
> I'm thinking there isn't anything much we can do here without using a
> different message wording for a match to a REJECT entry.  So it's a
> straight-up tradeoff of possible security information leakage against
> whether a different wording is really helpful to the admin.  Both of
> those seem like fairly marginal concerns, really, so I'm having a hard
> time deciding which one ought to win.  But given that nobody complained
> before this, is it worth changing?

What's wrong with something like "connection not permitted" or
"connection not authorized"?

...Robert


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: Thoughts on pg_hba.conf rejection
Следующее
От: Tom Lane
Дата:
Сообщение: Re: Thoughts on pg_hba.conf rejection