Re: [Firebird-devel] Ability to use non-local protocol to create DB which alias is declared as self-security

2022-08-10 Thread Alex Peshkoff via Firebird-devel
On 8/10/22 10:36, Pavel Cisar wrote: Hi, Dne 09. 08. 22 v 17:02 Alex Peshkoff via Firebird-devel napsal(a): *Pavel & Pavel!* I understand you have some problems with testing system due to unablity to create self-security database remotely. But I do not understand how could as solution be

Re: [Firebird-devel] Ability to use non-local protocol to create DB which alias is declared as self-security

2022-08-10 Thread Dimitry Sibiryakov
Pavel Cisar wrote 10.08.2022 9:36: I though that when referencing that right to create database should be checked in the same way as attachment to service manager (which does not use some database reference passed by user to decide which security db to use) I would like to repeat: service

Re: [Firebird-devel] Ability to use non-local protocol to create DB which alias is declared as self-security

2022-08-10 Thread Pavel Cisar
Hi, Dne 09. 08. 22 v 17:02 Alex Peshkoff via Firebird-devel napsal(a): *Pavel & Pavel!* I understand you have some problems with testing system due to unablity to create self-security database remotely. But I do not understand how could as solution be suggested not to check credetioals at

Re: [Firebird-devel] Ability to use non-local protocol to create DB which alias is declared as self-security

2022-08-09 Thread Dimitry Sibiryakov
Pavel Cisar wrote 09.08.2022 16:14: I really don't understand WHY it's necessary to authenticate user against some database for *create database*. Imagine someone creating thousands of databases without authentication. It's definitely not necessary to provide any kind of database reference

Re: [Firebird-devel] Ability to use non-local protocol to create DB which alias is declared as self-security

2022-08-09 Thread Alex Peshkoff via Firebird-devel
On 8/9/22 17:14, Pavel Cisar wrote: Hi, Dne 09. 08. 22 v 6:33 Alex Peshkoff via Firebird-devel napsal(a): Why this restriction exists ? Because login / password to be validated in the database that does not exist yet. Therefore password check fails and you can't attach to server. Without

Re: [Firebird-devel] Ability to use non-local protocol to create DB which alias is declared as self-security

2022-08-09 Thread Pavel Cisar
Hi, Dne 09. 08. 22 v 6:33 Alex Peshkoff via Firebird-devel napsal(a): Why this restriction exists ? Because login / password to be validated in the database that does not exist yet. Therefore password check fails and you can't attach to server. Without connection to server it's hard to

Re: [Firebird-devel] Ability to use non-local protocol to create DB which alias is declared as self-security

2022-08-09 Thread Alex Peshkoff via Firebird-devel
On 8/9/22 12:41, Dimitry Sibiryakov wrote: Alex Peshkoff via Firebird-devel wrote 09.08.2022 6:33: PPS. If one has access to database.conf to create new alias he definitely has embedded access to server, i.e. problem appears to be rather artificial.   Consider a shared database hosting where

Re: [Firebird-devel] Ability to use non-local protocol to create DB which alias is declared as self-security

2022-08-09 Thread Dimitry Sibiryakov
Alex Peshkoff via Firebird-devel wrote 09.08.2022 6:33: PPS. If one has access to database.conf to create new alias he definitely has embedded access to server, i.e. problem appears to be rather artificial. Consider a shared database hosting where aliases are created by admin for every

Re: [Firebird-devel] Ability to use non-local protocol to create DB which alias is declared as self-security

2022-08-09 Thread Mark Rotteveel
On 09-08-2022 06:33, Alex Peshkoff via Firebird-devel wrote: PPS. If one has access to database.conf to create new alias he definitely has embedded access to server, i.e. problem appears to be rather artificial. Not necessarily. One could have access to the filesystem or even only the

Re: [Firebird-devel] Ability to use non-local protocol to create DB which alias is declared as self-security

2022-08-08 Thread Alex Peshkoff via Firebird-devel
On 8/8/22 15:41, Pavel Zotov wrote: Currently one need to use only local connection in order to create self-security database, i.e.: 1) we create in the databases.conf alias of DB that we want to create, e.g.: tmp_self= $(dir_sampleDb)/tmp_self_example.fdb {     SecurityDatabase = tmp } 2) we

Re: [Firebird-devel] Ability to use non-local protocol to create DB which alias is declared as self-security

2022-08-08 Thread Dimitry Sibiryakov
Pavel Zotov wrote 08.08.2022 14:41: 2) we run "create database" statement and  specify there alias 'tmp_self', *without* protocol prefix ('localhost:', 'inet://', 'xnet://'): Have you forgot that it means embedded mode and user name/password are not checked at all? -- WBR, SD.

[Firebird-devel] Ability to use non-local protocol to create DB which alias is declared as self-security

2022-08-08 Thread Pavel Zotov
Currently one need to use only local connection in order to create self-security database, i.e.: 1) we create in the databases.conf alias of DB that we want to create, e.g.:tmp_self= $(dir_sampleDb)/tmp_self_example.fdb{    SecurityDatabase = tmp} 2) we run "create database" statement and  specify