Re: Better auth errors from libpq

From: Gregory Stark <stark(at)enterprisedb(dot)com>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: Joshua Drake <jd(at)commandprompt(dot)com>, David Fetter <david(at)fetter(dot)org>, PG Hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Better auth errors from libpq
Date: 2008-09-12 07:53:39
Message-ID: 87fxo5u7ek.fsf@oxford.xeocode.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers


Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> writes:

> Joshua Drake <jd(at)commandprompt(dot)com> writes:
>> I think something like:
>
>> psql: FATAL: Ident authentication failed for user "root"
>> HINT: http://www.postgresql.org/docs/8.3/static/client-authentication.html
>
>> Would be nice.
...
>
> Or to put it even more baldly: this is not an area in which you can
> improve matters significantly with five minutes' thought and a one-line
> patch. It would take some actual work.

Actually I think there is a problem with the original message that could be
improved. The problem is that "Ident" is a Postgres-specific term that a
newbie DBA is unlikely to understand. What's worse it's an ambiguous term that
is easily misunderstood to refer to the rfc1413 ident protocol which Postgres
might or might not be using.

I would suggest instead describing it using more generic terminology though
offhand I'm not sure what that would be. A detail line could include the
Postgres-specific authentication method which failed.

I do think it's true that the pg_hba setup is far more complex than it has to
be and that that's a bigger problem than a simple error message too.

--
Gregory Stark
EnterpriseDB http://www.enterprisedb.com
Get trained by Bruce Momjian - ask me about EnterpriseDB's PostgreSQL training!

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Markus Wanner 2008-09-12 08:08:56 Re: Better auth errors from libpq
Previous Message Peter Eisentraut 2008-09-12 07:29:54 Re: Move src/tools/backend/ to wiki