Re: [PATCHES] Solaris ident authentication using unix domain sockets - Mailing list pgsql-hackers

From Tom Lane
Subject Re: [PATCHES] Solaris ident authentication using unix domain sockets
Date
Msg-id 23040.1215319905@sss.pgh.pa.us
Whole thread Raw
In response to Re: [PATCHES] Solaris ident authentication using unix domain sockets  (Andrew Dunstan <andrew@dunslane.net>)
Responses Re: [PATCHES] Solaris ident authentication using unix domain sockets
List pgsql-hackers
Andrew Dunstan <andrew@dunslane.net> writes:
> Robert Treat wrote:
>> Hmm... I've always been told that Solaris didn't support this because the
>> Solaris developers feel that IDENT is inherently insecure.

> We don't actually use the Ident protocol for Unix sockets on any
> platform.

Indeed.  If the Solaris folk feel that getupeercred() is insecure,
they had better explain why their kernel is that broken.  This is
entirely unrelated to the known shortcomings of the "ident" IP
protocol.

            regards, tom lane

pgsql-hackers by date:

Previous
From: "David E. Wheeler"
Date:
Subject: Re: PATCH: CITEXT 2.0
Next
From: Tom Lane
Date:
Subject: Re: time_stamp type