Re: Patch: use SCM_CREDS authentication over PF_LOCAL sockets

From: Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us>
To: wollman(at)LCS(dot)MIT(dot)EDU
Cc: pgsql-patches(at)postgresql(dot)org
Subject: Re: Patch: use SCM_CREDS authentication over PF_LOCAL sockets
Date: 2001-08-16 04:34:14
Message-ID: 200108160434.f7G4YE527548@candle.pha.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-patches

> The following set of patches (relative to 7.1.2 release) implement
> SCM_CREDS authentication for local connections. On systems which
> support it, this mechanism should be used instead of `trust' for local
> connections.

OK, here is a cleaned up version of the patch that will apply to current
CVS. I worked it into the SO_PEERCRED code. I made some changes so it
compiles on BSD/OS. I am getting "Invalid Argument" from libpq's
sending of the credentials on BSD/OS. I would be interested to know if
this works on FreeBSD. Solaris uses this capability too.

Also, we are not updating the protocol version, so I hope it fails
gracefully on old clients.

--
Bruce Momjian | http://candle.pha.pa.us
pgman(at)candle(dot)pha(dot)pa(dot)us | (610) 853-3000
+ If your life is a hard drive, | 830 Blythe Avenue
+ Christ can be your backup. | Drexel Hill, Pennsylvania 19026

Attachment Content-Type Size
unknown_filename text/plain 12.8 KB

In response to

Browse pgsql-patches by date

  From Date Subject
Next Message Barry Lind 2001-08-16 05:11:35 Re: JDBC Array Support, Take III
Previous Message Bruce Momjian 2001-08-16 04:26:02 Re: Re: Proposal for encrypting pg_shadow passwords