Re: Parsing of pg_hba.conf and authentication inconsistencies

Поиск
Список
Период
Сортировка
От Alvaro Herrera
Тема Re: Parsing of pg_hba.conf and authentication inconsistencies
Дата
Msg-id 20080802154708.GN4321@alvh.no-ip.org
обсуждение исходный текст
Ответ на Re: Parsing of pg_hba.conf and authentication inconsistencies  (Tom Lane <tgl@sss.pgh.pa.us>)
Ответы Re: Parsing of pg_hba.conf and authentication inconsistencies  (Tom Lane <tgl@sss.pgh.pa.us>)
Re: Parsing of pg_hba.conf and authentication inconsistencies  ("Joshua D. Drake" <jd@commandprompt.com>)
Список pgsql-hackers
Tom Lane wrote:

> Idle thought: maybe what would really make sense here is a "lint"
> for PG config files, which you'd run as a standalone program and
> which would look for not only clear errors but questionable things
> to warn about.  For instance it might notice multiple pg_hba.conf
> entries for the same IP addresses, check whether an LDAP server
> can be connected to, check that all user/group/database names
> used in the file actually exist, etc.  These are things that we'd
> certainly not put into any load- or reload-time tests.

I like this idea.

postgres --check-hba-file /path/to/hba.conf
postgres --check-conf-file /path/to/postgresql.conf

(I think it's better to reuse the same postmaster executable, because
that way it's easier to have the same parsing routines.)

-- 
Alvaro Herrera                                http://www.CommandPrompt.com/
The PostgreSQL Company - Command Prompt, Inc.


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: Parsing of pg_hba.conf and authentication inconsistencies
Следующее
От: Sushant Sinha
Дата:
Сообщение: Re: [GENERAL] Fragments in tsearch2 headline