From: | Fujii Masao <masao(dot)fujii(at)gmail(dot)com> |
---|---|
To: | Brendan Jurd <direvus(at)gmail(dot)com> |
Cc: | pgsql-hackers(at)postgresql(dot)org |
Subject: | Re: Keywords in pg_hba.conf should be field-specific |
Date: | 2010-10-12 13:28:16 |
Message-ID: | AANLkTi=4nCkLi8p29up2gOuM1nNcotXwr49AopnjObjp@mail.gmail.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-hackers |
On Sat, Oct 9, 2010 at 11:13 AM, Brendan Jurd <direvus(at)gmail(dot)com> wrote:
> I understand that 'replication' is a keyword as far as the database
> name is concerned, but I was surprised to find that it was treated as
> a keyword in the username field also. I had a look in
> src/backend/libpq/hba.c, and next_token() appears to be completely
> naive about this. 'replication' (along with 'all', 'sameuser',
> 'samegroup' and 'samerole') is treated as a keyword wherever it
> appears, not just in the field where it is relevant. next_token()
> appends a newline to the end of the 'replication' username token, and
> that's why the entry doesn't match my connection attempt.
>
> I suspect this is going to trip a lot of people up. We could just
> document it and tell people that if they want to use 'replication' as
> a username, they'd better quote it in pg_hba.conf. But I'd prefer to
> actually solve the problem.
Agreed. We should address that.
Regards,
--
Fujii Masao
NIPPON TELEGRAPH AND TELEPHONE CORPORATION
NTT Open Source Software Center
From | Date | Subject | |
---|---|---|---|
Next Message | Tom Lane | 2010-10-12 13:36:15 | Re: pgxs docdir question |
Previous Message | KaiGai Kohei | 2010-10-12 13:20:51 | Re: security hook on table creation |