On 2/14/14, 8:36 AM, Stephen Frost wrote:
* Bruce Momjian (br...@momjian.us) wrote:
In an ideal world we would have a tool where you could plug in a
username, database, IP address, and test pg_hba.conf file and it would
report what line is matched.

That's not a bad idea, but we don't expose the logic that figures that
out today..  It would, perhaps, not be horrible to duplicate it, but
then we'd need to make sure that we update both places if it ever
changes (not that it's changed much in oh-so-many-years).  Perhaps
another candidate to be a GSoC project.

Stupid question... is there a reason we couldn't use the same code for both?

BTW, I'm not sure that SQL would be the appropriate API for this testing; but presumably 
it wouldn't be hard to add functionality to the wire protocol to support the case of 
"hypothetically, if I were to attempt a connection that looks like this, what would 
happen?"
--
Jim C. Nasby, Data Architect                       j...@nasby.net
512.569.9461 (cell)                         http://jim.nasby.net


--
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers

Reply via email to