Re: [PoC] Federated Authn/z with OAUTHBEARER - Mailing list pgsql-hackers

From Christoph Berg
Subject Re: [PoC] Federated Authn/z with OAUTHBEARER
Date
Msg-id aAkJnDQq3mOUvmQV@msg.df7cb.de
Whole thread Raw
In response to Re: [PoC] Federated Authn/z with OAUTHBEARER  (Jacob Champion <jacob.champion@enterprisedb.com>)
Responses Re: [PoC] Federated Authn/z with OAUTHBEARER
List pgsql-hackers
Re: Jacob Champion
> - Per ABI comment upthread, we are back to major-minor versioning for
> the shared library (e.g. libpq-oauth-18-0.so). 0001 adds the macros
> and makefile variables to make this easy, and 0002 is the bulk of the
> change now.

This will cause problems when programs are running while packages are
updated on disk. That program then tries to dlopen 18-0.so when there
is already 18-1.so installed. Relevant when the first oauth connection
is made way after startup.

This is trading one problem for another, but within-a-major ABI
changes should be much rarer than normal minor updates with
applications restarting only later.

Alternatively, there could be a dedicated SONAME for the plugin that
only changes when necessary, but perhaps the simple "18.so" solution
is good enough.

Christoph



pgsql-hackers by date:

Previous
From: Christoph Berg
Date:
Subject: Re: Enable data checksums by default
Next
From: Nathan Bossart
Date:
Subject: Re: vacuumdb --missing-stats-only and pg_upgrade from PG13