Re: Fwd: Keywords in pg_hba.conf should be field-specific

Поиск
Список
Период
Сортировка
От Ross J. Reedstrom
Тема Re: Fwd: Keywords in pg_hba.conf should be field-specific
Дата
Msg-id 20110621143435.GC18186@rice.edu
обсуждение исходный текст
Ответ на Re: Fwd: Keywords in pg_hba.conf should be field-specific  (Alvaro Herrera <alvherre@commandprompt.com>)
Список pgsql-hackers
On Tue, Jun 21, 2011 at 10:15:50AM -0400, Alvaro Herrera wrote:
> Excerpts from Pavel Stehule's message of mar jun 21 10:04:26 -0400 2011:
> > 2011/6/21 Alvaro Herrera <alvherre@commandprompt.com>:
> > > Excerpts from Pavel Stehule's message of mar jun 21 00:59:44 -0400 2011:
> > >
> > >> yes - it has a sense. Quoting changes sense from keyword to literal.
> > >> But then I see a significant inconsistency - every know keywords
> > >> should be only tokens.
> > >>
> > >>         else if (strcmp(token, "pamservice") == 0)
> > >> -             {
> > >> -                 REQUIRE_AUTH_OPTION(uaPAM, "pamservice", "pam");
> > >> -                 parsedline->pamservice = pstrdup(c);
> > >> -             }
> > >>
> > >> because >>pamservice<< - is known keyword, but 'pamservice' is some
> > >> literal without any mean. You should to use a makro token_is_keyword
> > >> more often.
> > >
> > > Yeah, I wondered about this too (same with auth types, i.e. do we accept
> > > quoted "hostssl" and so on or should that by rejected?).  I opted for
> > > leaving it alone, but maybe this needs to be fixed.  (Now that I think
> > > about it, what we should do first is verify whether it works with quotes
> > > in the unpatched code).
> 
> I tested it and it works: This line
> 
> "local" @dbs +b "trust"
> 
> is accepted and it works in the unpatched code.  I don't think we want
> to break people's existing pg_hba.conf files for no reason.  I doubt
> that many people are using pg_hba.conf tokens with quotes, mind you, but
> there might be some ...
> 
> In any case, if people here thinks we should tighten this, it's easy to
> do on top of this patch by changing the strcmp() calls to
> token_is_keyword, as you say.  Let's not burden this patch with the
> responsibility of doing so, because that's likely to get it punted.

Hmm, would it be possible to add some deprecation warnings for this case
without making the code too messy? Perhaps with a macro
"token_should_be_keyword". That's the usual path to tightening syntax.

Ross
-- 
Ross Reedstrom, Ph.D.                                 reedstrm@rice.edu
Systems Engineer & Admin, Research Scientist        phone: 713-348-6166
Connexions                  http://cnx.org            fax: 713-348-3665
Rice University MS-375, Houston, TX 77005
GPG Key fingerprint = F023 82C8 9B0E 2CC6 0D8E  F888 D3AE 810E 88F0 BEDE


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Pavel Stehule
Дата:
Сообщение: Re: Fwd: Keywords in pg_hba.conf should be field-specific
Следующее
От: Tom Lane
Дата:
Сообщение: Re: Fwd: Keywords in pg_hba.conf should be field-specific