Re: postgresql and LDAP

Emanuel Calvo Franco <postgres(dot)arg(at)gmail(dot)com> writes:

> 2009/3/10 Gregory Stark <stark(at)enterprisedb(dot)com>:
>> Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> writes:
>>> However, a tip that might help is that there should be more information
>>> about the problem in the postmaster log.  We intentionally don't send
>>> details about the conf file's contents to the client...
>>
>> Perhaps we should send a HINT to the client saying to consult the postmaster
>> logs?

egg on my face -- we already *do* have such a hint:

ereport(FATAL,
(errcode(ERRCODE_CONFIG_FILE_ERROR),
errmsg("missing or erroneous pg_hba.conf file"),
errhint("See server log for details.")));

> IMHO I think is quite dangerous because someone with experience could guess
> some security details.

How?

--
Gregory Stark
EnterpriseDB http://www.enterprisedb.com
Ask me about EnterpriseDB's 24x7 Postgres support!