[Dbconfig-common-devel] problems converting a package to dbconfig-common

[Karsten Hilbert]

On Mon, Jul 31, 2006 at 05:30:21AM -0400, sean finney wrote:

> On Mon, Jul 31, 2006 at 08:41:36AM +0200, Karsten Hilbert wrote:
> > To reliably detect it you will have to a) find out which
> > pg_hba/pg_ident file will be used and b) parse those files
> > exactly the same way PG itself does taking into account
> > database name, user name, network path type (tcp/ip vs
> > socket), and SSL status.
> 
> right, it's a first-to-match basis.  i think i've just modified the
> postgres stuff to default to something that will work with the default
> postgres install.
That sounds very reasonable.

> when a password is supplied, it bypasses the the ident
> stuff by talking via tcp/ip to localhost instead of using a socket,
> which would result in an ident check.
That should indeed work.

> if no password is supplied,
> it defaults to the ident based method and su's to the user if it exists.
Sounds about reasonable as well. I'd say the SU'ing should
be optional or at least non-fatal.

Karsten
-- 
GPG key ID E4071346 @ wwwkeys.pgp.net
E167 67FD A291 2BEA 73BD  4537 78B9 A9F9 E407 1346