[HACKERS] Authentication drop-down?

2004-03-18 Thread Josh Berkus
Folks, Jeremy handed me an interesting feature proposal at last night's SFPUG meeting. PG authentication methods ought to have drop-downs to other authentication methods, in the same manner as SSH and PAM. The idea would be this, if you had the following in your pg_hba.conf: somedb jeremy

Re: [HACKERS] Authentication drop-down?

2004-03-18 Thread Jon Jensen
On Thu, 18 Mar 2004, Josh Berkus wrote: Jeremy handed me an interesting feature proposal at last night's SFPUG meeting. PG authentication methods ought to have drop-downs to other authentication methods, in the same manner as SSH and PAM. The idea would be this, if you had the

Re: [HACKERS] Authentication drop-down?

2004-03-18 Thread Bruno Wolff III
On Thu, Mar 18, 2004 at 22:58:46 +, Jon Jensen [EMAIL PROTECTED] wrote: Is there some other way to do what I'm looking for here without the authentication method fallthrough Josh proposes? Assuming people aren't sharing accounts, you could let any authorized postgres user connect using

Re: [HACKERS] Authentication drop-down?

2004-03-18 Thread Jon Jensen
On Thu, 18 Mar 2004, Bruno Wolff III wrote: On Thu, Mar 18, 2004 at 22:58:46 +, Jon Jensen [EMAIL PROTECTED] wrote: Is there some other way to do what I'm looking for here without the authentication method fallthrough Josh proposes? Assuming people aren't sharing accounts, you

Re: [HACKERS] Authentication drop-down?

2004-03-18 Thread Bruno Wolff III
On Fri, Mar 19, 2004 at 02:01:40 +, Jon Jensen [EMAIL PROTECTED] wrote: That's true, but that doesn't satisfy the need. I want an automated process running as OS user postgres to authenticate with ident, but I'd also like to be able have, say, phpPgAdmin (running as user apache)

Re: [HACKERS] Authentication drop-down?

2004-03-18 Thread Tom Lane
Josh Berkus [EMAIL PROTECTED] writes: Any reason why this is a bad idea? It breaks client compatibility --- I don't think any existing clients are prepared to be challenged multiple times, and indeed the protocol spec specifically advises clients to drop the connection if they can't handle the

Re: [HACKERS] Authentication drop-down?

2004-03-18 Thread Richard Huxton
On Friday 19 March 2004 02:01, Jon Jensen wrote: On Thu, 18 Mar 2004, Bruno Wolff III wrote: On Thu, Mar 18, 2004 at 22:58:46 +, Jon Jensen [EMAIL PROTECTED] wrote: Is there some other way to do what I'm looking for here without the authentication method fallthrough Josh proposes?