Re: [GENERAL] "plan should not reference subplan's variable" when using row level security

Adam, * Adam Guthrie (asguth...@gmail.com) wrote: > psql:/tmp/test.sql:26: ERROR: plan should not reference subplan's variable > > Is this a bug or am I doing something wrong? Yeah, looks like a bug to me. My gut reaction is that we're pulling up a subquery in a way that isn't possible and

Re: [GENERAL] Get the date of creation of objects in the database

* Tom Lane (t...@sss.pgh.pa.us) wrote: > Stephen Frost <sfr...@snowman.net> writes: > > At least on a first blush look through the threads linked from such a > > search, I'm unimpressed by the arguments against and note that there are > > quite a few arguments f

Re: [GENERAL] Get the date of creation of objects in the database

David, * David G. Johnston (david.g.johns...@gmail.com) wrote: > The only source of data for that question is the local filesystem. If > that is acceptable you can find examples online provided to others who have > asked this question. What on the local filesystem would help here..? All you

Re: [GENERAL] Why does query planner choose slower BitmapAnd ?

* Seamus Abshere (sea...@abshere.net) wrote: > Is there any other way to differentiate the 2 index scans? FWIW, 10% of > houses are phoneable, 0.2% are in the city. (Maybe I'm just supposed to > drop the index like Tom said.) Have to admit that I continue to be interested in this as it might

Re: [GENERAL] Why does query planner choose slower BitmapAnd ?

* Tom Lane (t...@sss.pgh.pa.us) wrote: > Stephen Frost <sfr...@snowman.net> writes: > > I've not looked into the specific costing here to see why the BitmapAnd > > ended up being chosen over just doing an index scan with the btree and > > then filtering, but I do beli

Re: [GENERAL] Why does query planner choose slower BitmapAnd ?

Tom, all, * Tom Lane (t...@sss.pgh.pa.us) wrote: > Seamus Abshere writes: > > I don't understand why the query planner is choosing a BitmapAnd when an > > Index Scan followed by a filter is obviously better. > > > On Postgres 9.4.4 with 244gb memory and SSDs > > >

Re: [GENERAL] Why is my database so big?

All, * FarjadFarid(ChkNet) (farjad.fa...@checknetworks.com) wrote: > Tom, thanks for your unbiased detailed response. > > Interesting post. Please don't top-post. My comments are in-line, below. > -Original Message- > From: pgsql-general-ow...@postgresql.org >

Re: [GENERAL] 9.5rc1 RLS select policy on insert?

Ted, Please don't top-post on these lists. > On Wed, Jan 6, 2016 at 9:40 PM, Stephen Frost <sfr...@snowman.net> wrote: > > * Ted Toth (txt...@gmail.com) wrote: > >> I see the insert policy check running but also the select policy using > >> on insert. I don't

Re: [GENERAL] 9.5rc1 RLS select policy on insert?

* Ted Toth (txt...@gmail.com) wrote: > I see the insert policy check running but also the select policy using > on insert. I don't understand why the select policy is being run. > Could it possibly be related to using a sequence on the table? It's used when SELECT rights are required on the

Re: [GENERAL] Session Identifiers

Oleg, * oleg yusim (olegyu...@gmail.com) wrote: > tcp_keepalives_idle = 900 > tcp_keepalives_interval=0 > tcp_keepalives_count=0 > > Doesn't terminate connection to database in 15 minutes of inactivity of > psql prompt. So, it looks like that would work only for case if network > connection is

Re: [GENERAL] Check old and new tuple in row-level policy?

Karl, * Karl Czajkowski (kar...@isi.edu) wrote: > Ideally, I'd be able to write a policy that has conditions for each > category of operation: > >POLICY FOR SELECT WITH expr1 >POLICY FOR INSERT WITH expr2 >POLICY FOR DELETE WITH expr3 >POLICY FOR UPDATE WITH expr4 It's possible

Re: [GENERAL] Check old and new tuple in row-level policy?

Karl, * Karl Czajkowski (kar...@isi.edu) wrote: > On Dec 18, Stephen Frost modulated: > > Any UPDATE which requires SELECT rights on the table will require expr1 > > to pass AND expr4 (the UPDATE's USING clause) to pass. This is modeled > > directly off of our exis

Re: [GENERAL] Check old and new tuple in row-level policy?

Karl, * Karl Czajkowski (kar...@isi.edu) wrote: > I've been trying to learn more about the row-security policies but > coming up short in my searches. Was there any consideration to > allowing access to both old and new row tuples in a POLICY ... CHECK > expression? This idiom I've seen in the

Re: [GENERAL] Check old and new tuple in row-level policy?

* Karl Czajkowski (kar...@isi.edu) wrote: > I think that there is significant overlap between authorization, state > transition models, and data integrity constraints once you start > considering collaborative applications with mutable records. Even with OLD/NEW being available to UPDATE, many of

Re: [GENERAL] Permissions, "soft read failure" - wishful thinking?

Benjamin, * Benjamin Smith (li...@benjamindsmith.com) wrote: > Is there a way to set PG field-level read permissions so that a deny doesn't > cause the query to bomb, but the fields for which permission is denied to be > nullified? Not directly, no. One approach would be to create views

Re: [GENERAL] Can row level security policies also be implemented for views?

Caleb, * Caleb Meredith (calebmeredi...@gmail.com) wrote: > I'm developing an application where strict control of my data is important. > Views allow me to build a strict custom reading experience, allowing me to > add computed columns and hide private and metadata columns. Row level > security

Re: [GENERAL] "trust" authentication in pg_hba.conf

* Chris Withers (ch...@simplistix.co.uk) wrote: > What's the default contents of pg_hba.conf that postgres ships with? The PG community provides both source code, which is expected to be used by developers and is therefore wide open, and binary packages, which are expected to be used by end users

Re: [GENERAL] Use tar to online backup has an error

* David Steele (da...@pgmasters.net) wrote: > It's actually perfectly normal for files to disappear during a > backup, even when pg_start_backup() is called first (never perform > file-level backup with calling pg_start_backup()). The database *without* calling pg_start_backup, you mean. :) >

Re: [GENERAL] log_statement = 'mod' does not log all data modifying statements

* Bruce Momjian (br...@momjian.us) wrote: > On Fri, Jun 12, 2015 at 01:54:30PM -0500, Jack Christensen wrote: > > I was recently surprised by changes that were not logged by > > log_statement = 'mod'. After changing log_statement to 'all', I > > found that the changes were occurring in a writable

Re: [GENERAL] Creating a user for pg_start_backup

* Michael Paquier (michael.paqu...@gmail.com) wrote: On Tue, Jul 21, 2015 at 4:47 PM, Andrew Beverley a...@andybev.com wrote: Dear all, I'm setting up hot backups on my database server. As such, I'd like to set up a Postgres user that has access to only pg_start_backup and

Re: [GENERAL] Row level security - notes and questions

Charles, * Charles Clavadetscher (clavadetsc...@swisspug.org) wrote: I have been testing the new row level security feature of 9.5 and I have some notes and questions on it. Great! Glad to hear it. My first test is to enable row level security on the table without a policy in place.

Re: [GENERAL] RLS policy issue

Ted, * Ted Toth (txt...@gmail.com) wrote: I'd also expect that the rewrite would have added the POLICY SELECT USING clause to the query but I don't see any indication of that in the details that follow: Just running 'explain' should show the policy. Are you running this as the owner of the

Re: [GENERAL] pg_upgrade failing from 9.3 to 9.4 because template0 already exists

Bruce, * Bruce Momjian (br...@momjian.us) wrote: On Mon, Mar 9, 2015 at 12:43:05PM -0400, Bruce Momjian wrote: On Fri, Mar 6, 2015 at 06:10:15PM -0500, Stephen Frost wrote: The first is required or anyone who has done that will get the funny error that started this thread and things

Re: [GENERAL] PostgreSQL OGC compliant

Yoong Zhen, * Yoong Zhen Ang (y0z0...@gmail.com) wrote: I would like to check whether PostgreSQL is compliant with OGC. If it is, can you provide me the documentation to it? If you're talking about Open Geospatial Consortium, then what you really want is PostGIS, the spatial extension to

Re: [GENERAL] moving to PostgreSQL from MS-SQL and from Oracle, looking for feature comparison information

* Maxim Boguk (maxim.bo...@gmail.com) wrote: On Sun, May 10, 2015 at 12:30 PM, Yuri Budilov yuri.budi...@hotmail.com wrote: database and transaction log backup compression? not available? Transaction log backup compression not available (however could be easily archived via external

Re: [GENERAL] moving to PostgreSQL from MS-SQL and from Oracle, looking for feature comparison information

Yuri, Maxim, A few clarifications- * Maxim Boguk (maxim.bo...@gmail.com) wrote: In the meantime, I have scanned the manual for PostgreSQL 9.4 and there are a few things I was not able to find in the manual, my apologies if I missed it: 1. does PostgreSQL have parallel query capability

Re: [GENERAL] moving to PostgreSQL from MS-SQL and from Oracle, looking for feature comparison information

* Melvin Davidson (melvin6...@gmail.com) wrote: In addition to the other great comments and advice that have been posted, you might want to review the Database Compatibility Technology for Oracle document from EnterpriseDB.

Re: [GENERAL] moving to PostgreSQL from MS-SQL and from Oracle, looking for feature comparison information

* Jack Christensen (j...@jackchristensen.com) wrote: On 05/09/2015 06:33 AM, Stephen Frost wrote: Temporary tables will be in memory unless they overflow work_mem and we do support unlogged tables and tablespaces which you could stick out on a ramdisk if you want. I would suggest not putting

Re: [GENERAL] now() vs 'epoch'::timestamp

James, * James Cloos (cl...@jhcloos.com) wrote: I've for some time used: (now()::timestamp without time zone - 'epoch'::timestamp without time zone)::reltime::integer to get the current seconds since the epoch. The results are consistant with date +%s. (Incidently, is there a

Re: [GENERAL] Strange security issue with Superuser access

* Andrzej Pilacik (cypise...@gmail.com) wrote: Can anyone explain how the FK constraint function works? Is it executed as the owner of the object. That is the only thing that would make sense for me. Yes. Thanks, Stephen signature.asc Description: Digital

Re: [GENERAL] Postgres and data warehouses

* Nigel Gardiner (nigelgardi...@gmail.com) wrote: I've had a quick search and haven't seen this approach used yet, but I was thinking, the asynchronous replication of Postgres databases could be used as a streaming journal of changes to be processed by a data warehouse. The other approach that

Re: [GENERAL] pg_upgrade failing from 9.3 to 9.4 because template0 already exists

* Tom Lane (t...@sss.pgh.pa.us) wrote: Stephen Frost sfr...@snowman.net writes: * Tom Lane (t...@sss.pgh.pa.us) wrote: Perhaps pg_upgrade should deliberately ignore template0 regardless of datallowconn? And/or we should hard-wire that into pg_dumpall? My thinking would

Re: [GENERAL] pg_upgrade failing from 9.3 to 9.4 because template0 already exists

Matt, In your existing environment, do you have template0 set to allow connections (datallowconn)? That's not a good idea in general, but I suspect that's why pg_dumpall is including it based on a quick look at the code. Thanks! * Matt Landry (lelnet.m...@gmail.com) wrote: Attempting to

Re: [GENERAL] pg_upgrade failing from 9.3 to 9.4 because template0 already exists

Adrian, * Adrian Klaver (adrian.kla...@aklaver.com) wrote: On 03/06/2015 10:11 AM, Matt Landry wrote: Attempting to upgrade a large (3TB) postgressql database from 9.3 to 9.4 on Ubuntu 14.04 LTS, but the process fails fairly early on. The error message instructs me to look at the last few

Re: [GENERAL] pg_upgrade failing from 9.3 to 9.4 because template0 already exists

* Tom Lane (t...@sss.pgh.pa.us) wrote: Stephen Frost sfr...@snowman.net writes: * Matt Landry (lelnet.m...@gmail.com) wrote: postgres=# select datname, datallowconn from pg_database ; datname | datallowconn ---+-- template1 | t template0 | t postgres | t

Re: [GENERAL] pg_upgrade failing from 9.3 to 9.4 because template0 already exists

Matt, * Matt Landry (lelnet.m...@gmail.com) wrote: postgres=# select datname, datallowconn from pg_database ; datname | datallowconn ---+-- template1 | t template0 | t postgres | t reporting | t (4 rows) Right, as I mentioned, template0 shouldn't have

Re: [GENERAL] Partitioning and constraint exclusion

Sam, * Samuel Smith (pg...@net153.net) wrote: Does anyone know if there is a wishlist item for improving this in postgresql or is this as good as it gets for now? It's absolutely on the todo list for PG to support declarative partitioning and handle these cases better. There has been a good

Re: [GENERAL] Spam on main page

* pinker (pin...@onet.eu) wrote: You have spam on postgresql.org main page... Jim Smith: Myśli o istotnych Szczegóły kwiatów dostawy online It's not even proper polish :) Fixed that, sorry for not realising it earlier. We saw it on the planet side pretty quickly, just missed that it also

Re: [GENERAL] Partitioning and constraint exclusion

Samuel, * Samuel Smith (pg...@net153.net) wrote: I noticed that I could get very nice partition elimination using constant values in the where clause. Ex: select * from table where constraint_col between '2015-01-01' and '2015-02-15' However, I could not get any partition elimination

Re: [GENERAL] Row-level Security vs Application-level authz

* David Steele (da...@pgmasters.net) wrote: On 2/23/15 8:16 PM, Stephen Frost wrote: * David G. Johnston (david.g.johns...@gmail.com) wrote: I take it that the table has to be permanent otherwise you would have suggested and unlogged temporary table as the target... A temporary table

Re: [GENERAL] Row-level Security vs Application-level authz

* David Steele (da...@pgmasters.net) wrote: On 2/24/15 3:07 PM, Stephen Frost wrote: The problem with a temporary table is, well, it goes away. :) There are further concerns that, because it's created in some fashion by the single application user, it might be less secure. Really, though

Re: [GENERAL] Row-level Security vs Application-level authz

* David Steele (da...@pgmasters.net) wrote: So I guess my last question is if you are inserting rows into a table to track user connections, how do you clean them out when the client does not disconnect cleanly? Or is this table intended to be append-only? It wouldn't be intended to be

Re: [GENERAL] Row-level Security vs Application-level authz

Adam, * Adam Hooper (a...@adamhooper.com) wrote: On Tue, Feb 24, 2015 at 8:37 PM, Stephen Frost sfr...@snowman.net wrote: * David Steele (da...@pgmasters.net) wrote: So I guess my last question is if you are inserting rows into a table to track user connections, how do you clean them out

Re: [GENERAL] Row-level Security vs Application-level authz

* David G Johnston (david.g.johns...@gmail.com) wrote: My quick take-away from RLS compared to traditional multi-tenant security policies is that with RLS you move the security logic into the database and leverage the native database roles. Your model likely makes use of a single user

Re: [GENERAL] Row-level Security vs Application-level authz

* David G. Johnston (david.g.johns...@gmail.com) wrote: On Mon, Feb 23, 2015 at 6:01 PM, Stephen Frost sfr...@snowman.net wrote: * David G Johnston (david.g.johns...@gmail.com) wrote: My quick take-away from RLS compared to traditional multi-tenant security policies is that with RLS you

Re: [GENERAL] Row-level Security vs Application-level authz

Darin, * Darin Gordon (dar...@gmail.com) wrote: I'm trying to understand the extent that row level security in postgresql 9.5 may replace, or augment, application-level access control. Neat! I have a fully implemented application-level access control policy. It's not clear to me how I will

Re: [GENERAL] Issue dumping schema using readonly user

Daniel, * Daniel LaMotte (lamott...@gmail.com) wrote: I understand this. This is the behavior I want. What I don't understand is why the readonly user can inspect the schema of the table interactively when pg_dump refuses to do the same via the command line (assumably it asks for too much

Re: [GENERAL] Issue dumping schema using readonly user

Melvin, * Melvin Davidson (melvin6...@gmail.com) wrote: Simply put, giving access to a schema DOES NOT automatically give access to any table in the schema. So if you want a specific user ( or role) to be able to read (or pg_dump) all tables in the schema, then you must GRANT SELECT of all

Re: [GENERAL] Issue dumping schema using readonly user

* Tom Lane (t...@sss.pgh.pa.us) wrote: Stephen Frost sfr...@snowman.net writes: The issue is that pg_dump wants to lock the table against changes, which is really to prevent the table to change between we got the definition of the table and pulling the records out of the table. It's

Re: [GENERAL] Active/Active clustering in postgres

* Suzuki Hironobu (hiron...@interdb.jp) wrote: (2014/11/27 2:20), John R Pierce wrote: On 11/26/2014 2:36 AM, Postgres India wrote: I am looking for PostgreSQL active/active clustering and whether PostgreSQL support any form of shared-storage clustering . Is there any methods or tools for

Re: [GENERAL] Tablespace limit feature

* Jim Nasby (jim.na...@bluetreble.com) wrote: On 11/4/14, 2:10 PM, Alvaro Herrera wrote: Alejandro Carrillo escribió: But This feature is very necessary to control the amount space expensed by a postgresql user or tablespace. This feature could be used in PostgreSQL Sharing Hosting, see:

Re: [GENERAL] Tablespace limit feature

* Alejandro Carrillo (faster...@yahoo.es) wrote: Can PostgreSQL's tablespace limit space in MB? Or exists another way to limit space in a table of a tablespace?? You can set up quotas on the underlying filesystem, but that will limit the entire tablespace. Having quotas and limits for users

Re: [GENERAL] Tablespace limit feature

* Guillaume Lelarge (guilla...@lelarge.info) wrote: Le 4 nov. 2014 16:29, Stephen Frost sfr...@snowman.net a écrit : Having quotas and limits for users is something which I've wanted for a long time, but it's not likely to happen any time particularly soon.. Lack of time or technical issue

Re: [GENERAL] Tablespace limit feature

* Guillaume Lelarge (guilla...@lelarge.info) wrote: Yeah. I guess there are a lot of questions yet to be answered. But AFAIUI, there's no real technical issue. More like discussions to agree on what it should do and how. Didn't mean to imply there was some specific technical issue. We have

Re: [GENERAL] Tablespace limit feature

* John R Pierce (pie...@hogranch.com) wrote: On 11/4/2014 9:00 AM, Alejandro Carrillo wrote: I need to limit the tablespace file because I need to control the hard disk space used in a tablespace so what happens if a query does something that violates the quota? It gets cancelled. See

Re: [GENERAL] Planet Postgres

* Adrian Klaver (adrian.kla...@aklaver.com) wrote: On 10/30/2014 12:02 PM, Torsten Förtsch wrote: I don't know if this is the right mailing list for my question but I have already emailed pla...@postgresql.org without any response. That's the correct place to ask. -general is not. So, what

Re: [GENERAL] Postgre SQL SHA-256 Compliance

Anthony, * Anthony Burden (anthony.d.burden@mail.mil) wrote: validate some software with you to ensure that all our installed PostgreSQL software meets SHA-256 compliance. There is basically two things we are looking for: 1) Identify all COTS software purchased as part of scheduled and

Re: [GENERAL] CREATE SYNONYM in PostgreSQL

Vinayak, * Vinayak (vinpok...@gmail.com) wrote: We are converting the Oracle's CREATE SYNONYM statement into PostgreSQL. Ah, I remember having to deal with exactly that issue when migrating from Oracle. I think to replace the SYNONYM we use search_path in PostgreSQL and the same thing is

Re: [GENERAL] security labels or sensitivity markings

* sumita (su...@avaya.com) wrote: Does postgresql support the use of security labels or sensitivity markings? For tables, yes, but not yet for rows/RLS. There is ongoing work in this area and the hope is that there will be some form of RLS in 9.5. As mentioned, security barrier views can be

Re: [GENERAL] Logging authentication requests with GSSAPI

Joshua, * Joshua Warburton (j.warbur...@irax.com) wrote: I'm authenticating to postgres using GSSAPI and (for audit reasons) I need to be able to log the principle name that connects as well as the username it is mapped to. Is there any way I can get postgres to log this without cranking up

[GENERAL] Planned downtime @ Rackspace - 2014-04-29 2100-2200 UTC

Greetings, This is take-2 on this. Apologies for the short notice. As some may be aware, we are currently working with Rackspace to upgrade the PostgreSQL infrastructure systems which they graciously host for us. As part of these upgrades there will be downtime for systems hosted

Re: [GENERAL] Planned downtime @ Rackspace - 2014-04-29 2100-2200 UTC

All, We have confirmation from Rackspace that the maintenance will begin in ~5 minutes. Thanks! Stephen * Stephen Frost (sfr...@snowman.net) wrote: Greetings, This is take-2 on this. Apologies for the short notice. As some may be aware, we are currently

Re: [GENERAL] Select max(id) causes AccessExclusiveLock?

Edson, * Edson Richter (edsonrich...@hotmail.com) wrote: The programmer added a LOCK TABLE MyTableName just before issuing the select max(id) from MyTableName. I do suspect this is the case, right? Yup, that'll do it. http://www.postgresql.org/docs/9.3/static/sql-lock.html

Re: [GENERAL] Heartbleed Impact

* Dev Kumkar (devdas.kum...@gmail.com) wrote: AFAIK, the binary name is postgres.exe, from what I've read they are static linking openssl. the updated versions on the site linked in another message are fixed per the note on that page.

Re: [GENERAL] Heartbleed Impact

* Alvaro Herrera (alvhe...@2ndquadrant.com) wrote: Dev Kumkar wrote: of which OpenSSL package versions' libssl.1.0.0.so is available at http://www.enterprisedb.com/products-services-training/pgbindownload ? Ok, looked at the STRINGS versions and the OpenSSL 1.0.1f 6 Jan 2014 is

Re: [GENERAL] Heartbleed Impact

* Dev Kumkar (devdas.kum...@gmail.com) wrote: I just downloaded the latest binaries from EnterpriseDB and when checked with libssl.so.1.0.0 can see this: OpenSSL 1.0.1g 7 Apr 2014 OpenSSL 1.0.1g is the patched version. Yes, checked w/ them and they say it's all patched.. Awaiting

Re: [GENERAL] restore_command ignored in recovery.conf on standby

Rene, * Rene Romero Benavides (rene.romer...@gmail.com) wrote: restore_command='/bin/tar -xzf /db/wal_archives/%f.tar.gz -C %p' [...] I tested the restore_command replacing variables and it works. Any ideas on why it isn't being executed? Are you sure that it isn't being executed and just

Re: [GENERAL] restore_command ignored in recovery.conf on standby

* Rene Romero Benavides (rene.romer...@gmail.com) wrote: Yep, I checked: [postgres@uxmal standby_node]$ /bin/tar -xzf /db/wal_archives/000101ED00FB.tar.gz -C /db/standby_node/pg_xlog/ [postgres@uxmal standby_node]$ echo $? 0 Err, sure, but that isn't actually what is being

Re: [GENERAL] restore_command ignored in recovery.conf on standby

%p'. The other option, if you really want to keep them tar'd, would be to use tar's -O option, eg: tar -O -zxf /db/wal_archives/%f.tar.gz %f %p There is also a --transform option that you could pass to tar to change the filenames. My best regards to Stephen Frost. Thanks! Stephen

Re: [GENERAL] GSSAPI/SSPI and mismatched user names

* Brian Crowell (br...@fluggo.com) wrote: https://github.com/npgsql/Npgsql/issues/162#issuecomment-35916650 Reading through this- can't you use GSSAPI to get the Kerberos princ found the ticket which is constructed? I'm pretty sure the MIT libraries support that, at least... The short version

Re: [GENERAL] GSSAPI/SSPI and mismatched user names

* Brian Crowell (br...@fluggo.com) wrote: On Mon, Feb 24, 2014 at 12:55 PM, Stephen Frost sfr...@snowman.net wrote: * Brian Crowell (br...@fluggo.com) wrote: https://github.com/npgsql/Npgsql/issues/162#issuecomment-35916650 Reading through this- can't you use GSSAPI to get the Kerberos

Re: [GENERAL] Re: Drop all overloads of a function without knowing parameter types

* David Johnston (pol...@yahoo.com) wrote: Evan Martin wrote So I don't agree with the suggestion of matching function names using a regex, since that's not supported for other types of objects. To explain the use case a little better: Uh, we could add such support, which might be very

Re: [GENERAL] [ADMIN] GSSAPI authentication with AD

Abbas, * Abbas (abbas@gmail.com) wrote: created enterprisedb user in AD with DES encryption type. Do not use DES- it's not secure and there's no reason to use it. Use AES instead. -bash-4.1$ klist Ticket cache: FILE:/tmp/krb5cc_501 Default principal:

Re: [GENERAL] GSSAPI server side on Linux, SSPI client side on Windows

* Christian Ullrich (ch...@chrullrich.net) wrote: I tried to fix it using the reverse of they one-line fix that worked in both JDBC and libpq. There, the problem was that they only supported GSSAPI and had no clue about SSPI (except libpq on Windows). The fix was to basically declare GSSAPI

Re: [GENERAL] GSSAPI server side on Linux, SSPI client side on Windows

Brian, * Brian Crowell (br...@fluggo.com) wrote: However, the eventual goal was to connect to this same server from a .NET app running on Windows, and here I've run into a snag. The Npgsql library does not support GSSAPI—it only supports SSPI, which is nearly-but-not-enough-like the same

Re: [GENERAL] Monitoring number of backends

Andy, * andy (a...@squeakycode.net) wrote: My website is about to get a little more popular. I'm trying to add in some measurements to determine an upper limit of how many concurrent database connections I'm currently using. PG is really *much* happier if you have only one backend per CPU in

Re: [GENERAL] Monitoring number of backends

* andy (a...@squeakycode.net) wrote: If I did plugin pg_bouncer, is it worth switching my php from pg_connect to pg_pconnect? No, let pg_bouncer manage the connection pooling. Having two levels of pooling isn't a good idea (and pg_bouncer does a *much* better job of it anyway, imv..). I'd

Re: [GENERAL] Monitoring number of backends

* John R Pierce (pie...@hogranch.com) wrote: On 10/22/2013 10:59 AM, Stephen Frost wrote: PG is really*much* happier if you have only one backend per CPU in your system. The way to get there is by using a connection pooler like pg_bouncer and configuring it based on how many CPUs you have

Re: [GENERAL] Monitoring number of backends

* John R Pierce (pie...@hogranch.com) wrote: On 10/22/2013 1:13 PM, andy wrote: No, actually, I don't think my connect overhead is huge. My apache and postgres are on the same box, and it connects using unix socket. Perhaps if my apache on db were on different boxes it would be a problem.

Re: [GENERAL] Preserving the source code of views

Brian, * Brian Crowell (br...@fluggo.com) wrote: On Sun, Oct 20, 2013 at 4:24 PM, Tom Lane t...@sss.pgh.pa.us wrote: No, and it's very unlikely that there ever will be, because it's completely against the system structure at a number of levels. However, there's more than one way to skin

Re: [GENERAL] pg_dump resulting in excessive memory use by postmaster process

* Ben (ben.fy...@champsoftware.com) wrote: is killed off (6GB+ used by a single postmaster process). Here are the [...] Total number of relations across all schemas: 53,154 [...] I should also mention that when performing these dumps there is absolutely no other DB activity occurring. Do you

Re: [GENERAL] pg_dump resulting in excessive memory use by postmaster process

Ben, * Ben (ben.fy...@champsoftware.com) wrote: When you say self-contained test case, what is it exactly that you're looking for? A script that builds out a DB with hundreds of schemas/relations, a pg_basebackup or something else? Ideally, an SQL script that builds the DB and then a pg_dump

Re: [GENERAL] Largest PG database known to man!

* John R Pierce (pie...@hogranch.com) wrote: if we assume the tables average 1KB/record (which is a fairly large record size even including indexing), you're looking at 400 billion records. if you can populate these at 5000 records/second, it would take 2.5 years of 24/7 operation to

Re: [GENERAL] Major upgrade of PostgreSQL and MySQL

* Ivan Voras (ivo...@freebsd.org) wrote: If I read the documentation correctly (http://www.postgresql.org/docs/9.3/static/pgupgrade.html), it needs oldbindir and newbindir arguments pointing to the directories of PostgreSQL executables for the old and new versions, making it basically

Re: [GENERAL] Major upgrade of PostgreSQL and MySQL

* Patrick Dung (patrick_...@yahoo.com.hk) wrote: The problem of pg_upgrade is that it needed to hold two set of databases data in the server. What? That's absolutely *not* required for pg_upgrade to work. In general, I would recommend that you make a copy of the database, but it's certainly

Re: [GENERAL] Major upgrade of PostgreSQL and MySQL

Patrick, On Friday, September 13, 2013, Patrick Dung wrote: What? That's absolutely *not* required for pg_upgrade to work. In general, I would recommend that you make a copy of the database, but it's certainly not required. I mean the old version and new version would need to take up disk

Re: [GENERAL] Major upgrade of PostgreSQL and MySQL

Patrick, * Patrick Dung (patrick_...@yahoo.com.hk) wrote: I think the documentation could put a note at the beginning for new users. Yes, probably true. Feel free to propose specific improvements. 2. Also I think the documentation should provide more info for users that use packages. Most

Re: [GENERAL] Using LDAP for PostgreSQL permissions/authentication

* Bill Moran (wmo...@potentialtech.com) wrote: As documented, LDAP solves a few of the problems we have -- since everyone will be in LDAP, we can use LDAP's password complexity rules and password expiration to handle those security requirements, and (of course) when someone changes their

Re: [GENERAL] PostrgreSQL Commercial restrictions?

Richard, * Richard Broersma (richard.broer...@gmail.com) wrote: On Wed, Aug 7, 2013 at 8:43 AM, David Johnston pol...@yahoo.com wrote: Where the PostgreSQL license comes into play is if you make alterations to the PostgreSQL database itself - the underlying engine implemented in C and to

Re: [GENERAL] prepared statement functioning range

* 高健 (luckyjack...@gmail.com) wrote: Is there any common calculation methods for deciding the max_connections value? max_connections is a hard limit and so you'd want to have that higher than the number of connections you actually expect to have. The general recommendation is to have the same

Re: [GENERAL] Why hash join cost calculation need reduction

* 高健 (luckyjack...@gmail.com) wrote: [...] postgres=# explain analyze select * from sales s inner join customers c on s.cust_id = c.cust_id and c.cust_id =2; [...] When I use the where condition such as cust_id=2, postgresql is clever enough to know it is better to make seqscan and

Re: [GENERAL] prepared statement functioning range

* 高健 (luckyjack...@gmail.com) wrote: So I can draw a conclusion: Prepared statement is only for use in the same session at which it has been executed. Prepared statements are session-local. It can not be shared via multiple sessions. Correct. That is, when in some special situations ,

Re: [GENERAL] Why hash join cost calculation need reduction

Greetings, * 高健 (luckyjack...@gmail.com) wrote: And I found the following function of PostgreSQL9.2.1. The hash join cost is calculated. But what confused me is a reuction calculation: qp_qual_cost.per_tuple -= hash_qual_cost.per_tuple; My question is: Why the reduction is needed

Re: [GENERAL] Introduction

James, * Corbett, James (james.corb...@cra-arc.gc.ca) wrote: My name is Jim Corbett and I hail from Ottawa Canada where I work for the federal government as a Java Web developer. Good to have you; unfortunately you just missed PgCon, which was held at the University of Ottawa last week. The

Re: [GENERAL] ROLE based DEFAULT PRIVILEGES

* James Sewell (james.sew...@lisasoft.com) wrote: Is there a way to achieve this? I want role_a to maintain this level of access as new tables are created (all creators will be in role_b). Sadly, no. It's exactly what I was originally hoping for with the DEFAULT PRIVILEGES capability, but it's

Re: [GENERAL] How to check if Postgresql files are OK

* Amit Langote (amitlangot...@gmail.com) wrote: How does one validate a backup? Is there any generally practiced way of doing that? Or what do you mean when you say tested backups? You restore from it and then query the restored database for expected contents, at least. Thanks,

Re: [GENERAL] What are ExecSeqMarkPos and ExecSeqRestrPos used for

* DT (kurt...@hotmail.com) wrote: I'm reading code of nodeSeqscan, and was confused with ExecSeqMarkPos and ExecSeqRestrPos. They are only called by ExecMergeJoin. Could merge join use a plain seqscan as outer/inner plan? If not, what are they used for? ExecSeqMarkPos and ExecSeqRestPos are

Re: [GENERAL] Strange behavior of = as assignment operator

* Moshe Jacobson (mo...@neadwerx.com) wrote: It seems that the comparison operator = is functioning as the assignment operator := in this plpgsql trigger script I wrote. I was under the impression that = is only for comparison and not assignment. If this is true, please explain the transcript

Re: [GENERAL] Strange behavior of = as assignment operator

* Moshe Jacobson (mo...@neadwerx.com) wrote: Any PG committers who can change this in 9.3? It will certainly not be changed for 9.3. As suggested, perhaps in 10.0, but I tend to doubt it. It will certainly be mentioned in the release notes when it happens. Thanks,

Re: [GENERAL] How to evaluate disk space needed by a table

* 高健 (luckyjack...@gmail.com) wrote: So , Is there any method to correctly evaluate disk space one table will need, given the table's column data types and , estimated record numbers ? The simplest might be to do exactly what you did- create the table and then check the size with a subset of

<    1   2   3   4   5   >