Peter Eisentraut wrote:
Thomas Hallgren wrote:
Well, yes. But use the word environment in singular please :-) To my
knowledge the security is full-proof with all other VM's since they
all use the standard runtime libraries.
It's not quite as simple as that. There are a bunch of VMs
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tom Lane
Sent: 07 September 2005 22:40
To: pgsql-committers@postgresql.org
Subject: [COMMITTERS] pgsql: Update timezone data files to
release 2005m of the zic database.
Log Message:
Oh, I didn't realize a FETCH would show up as an EXECUTE. That is wrong
and should be fixed because a user-level FETCH shows up as a fetch, not
as the original query.
---
Simon Riggs wrote:
Oliver Jowett wrote:
Hi Hackers,
PostgreSQL can treat variable-length data flexibly, but therefore
it consumes more spaces if we store short data. Headers of
variable-length types use 4 bytes regardless of the data length.
My idea is to change the header itself to variable-length.
In order to reduce the size of
Dave Page wrote:
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tom Lane
Sent: 07 September 2005 22:40 To: pgsql-committers@postgresql.org
Subject: [COMMITTERS] pgsql: Update timezone data files to release
2005m of the zic database.
Log Message:
Hi, I'm trying to compile Postgresql 8.1 beta on my own in mingw/windows.
I tried to compile it with --with-bonjour but it is looking for the wrong
file, it looks for DNSServiceDiscovery.h but Apple provides a file named
dns_sd.h (Bonjour SDK for windows as of May 5 2005), after renaming it
[EMAIL PROTECTED] wrote:
Hi, I'm trying to compile Postgresql 8.1 beta on my own in mingw/windows.
I tried to compile it with --with-bonjour
I don't recall ever hearing that this has been done.
but it is looking for the wrong
file, it looks for DNSServiceDiscovery.h but Apple provides a
Hi Andrew, you wrote:
I don't recall ever hearing that this has been done.
bonjour is the new name of Apple's rendezvous technology, an old email
(http://archives.postgresql.org/pgsql-hackers/2005-05/msg00739.php) stated
that rendezvous support was working at least on macosx and windows, so I
James William Pye [EMAIL PROTECTED] writes:
Like I asked above, why does it have to be done in two connection
cycles? I'm assume by connection cycle you are referring to reopening
the socket, or...?
You're right, it wouldn't be necessary to tear down the socket --- but
it *would* be necessary
Dave Cramer wrote:
Actually the apache guys are doing another one (Harmony), and there
is Kaffe. Hardly relevant to the conversation, just added for completion
I stand corrected. I forgot Kaffe. It also uses the classpath stuff
and have the same issues as GCJ.
Isn't Harmony is just an
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I'm also a little baffled to come up with any real application where making
an id number for most tables unguessable would provide any kind of real
protection not far better provided by other means. For your users
table, sure, but that's a
On 8-Sep-05, at 2:18 AM, Thomas Hallgren wrote:
Peter Eisentraut wrote:
Thomas Hallgren wrote:
Well, yes. But use the word environment in singular please :-) To my
knowledge the security is full-proof with all other VM's since they
all use the standard runtime libraries.
It's not
Well don't forget sablevm, and jamvm. there's quite a few around.
Dave
On 8-Sep-05, at 9:48 AM, Thomas Hallgren wrote:
Dave Cramer wrote:
Actually the apache guys are doing another one (Harmony), and
there is Kaffe. Hardly relevant to the conversation, just added
for completion
I
Greg, thanks for saying it... I was thinking the same thing.
Not that it really relates to the UUID data type inclusion discussion
itself, but I think this application design and use case for UUID is an
example of using a data type for the wrong purpose. Application
design-wise, security should
Hello All,
Please allow me to put a disclaimer, I am no serious PG hacker,
but would it be possible to allow for a simple config script to be run
(which would work even via /etc/init.d) which could be used to generate a
config file for initdb, which initdb could read and do its thing ?
On Wednesday 07 September 2005 18:44, Peter Eisentraut wrote:
Why do you need access to postgresql.conf.sample?
We don't need access to that file, but install some sql files into the share
dir, the test for postgresql.conf.sample is there just to see if the dir
looks like a likely candidate
On Wednesday 07 September 2005 17:31, Andrew Dunstan wrote:
Darcy Buskermolen wrote:
On Wednesday 07 September 2005 15:52, Andrew Dunstan wrote:
Peter Eisentraut wrote:
Andrew Dunstan wrote:
pg_config doesn't currently seem to have an option to report the
share_dir. Should it?
Is there a
On Thu, Sep 08, 2005 at 01:45:10PM -, Greg Sabino Mullane wrote:
For a rather simple example, consider a site that associates a picture
with each member. If the pictures are named 1.jpg, 2.jpg, 3.jpg, etc.
it makes it ridiculously easy to write a script to pull all of the
pictures off
On Thu, Sep 08, 2005 at 09:54:59AM +0800, Christopher Kings-Lynne wrote:
I think we should just do what MySQL does and include:
postgresql.conf
postgresql-large.conf
postgresql-huge.conf
I do that, in the package of PG I distribute with my application. I
tell the user that they should use
Mark,
I think what Greg suggested was sha1(number) as the key instead of
requiring uuid as the key... it would perform the same function as far
as you r use case is concerned.
As a similar example (using MD5):
CREATE SEQUENCE marks_seq START 1 INCREMENT 1;
CREATE TABLE your_tbl (
your_key
Steve Atkins wrote:
These are technically literate customers working for large ISPs, with
significant local sysadmin and DBA support, so the concept is not beyond them.
Yet when I ssh in to one of their servers only about 1 in 3 is running
with anything other than the default
On 2005-09-08, Tom Lane [EMAIL PROTECTED] wrote:
initdb is really the wrong place for this anyway, because in many
situations (RPM installations for instance) initdb is run behind the
scenes with no opportunity for user interaction. We should be doing
our best to remove options from initdb,
On Thu, Sep 08, 2005 at 12:02:54PM -0400, Jonah H. Harris wrote:
I think what Greg suggested was sha1(number) as the key instead of requiring
uuid as the key... it would perform the same function as far as you r use
case is concerned.
I'm sure he meant something like this. But I am still
Takahiro,
PostgreSQL can treat variable-length data flexibly, but therefore
it consumes more spaces if we store short data. Headers of
variable-length types use 4 bytes regardless of the data length.
My idea is to change the header itself to variable-length.
In order to reduce the size of
Folks,
Help on the Configurator is actively solicited. I really think this is a
better solution for this problem.
http://www.pgfoundry.org/projects/configurator
--
Josh Berkus
Aglio Database Solutions
San Francisco
---(end of broadcast)---
TIP
[EMAIL PROTECTED] writes:
I don't recall ever hearing that this has been done.
bonjour is the new name of Apple's rendezvous technology, an old email
(http://archives.postgresql.org/pgsql-hackers/2005-05/msg00739.php) stated
that rendezvous support was working at least on macosx and windows,
Josh Berkus wrote:
Folks,
Help on the Configurator is actively solicited. I really think this is a
better solution for this problem.
http://www.pgfoundry.org/projects/configurator
I don't agree, for several reasons.
1. Steve has already told us most of his clients just go with the
Andrew - Supernews wrote:
Running initdb behind the scenes is a proven dangerous practice
Please elaborate.
--
Peter Eisentraut
http://developer.postgresql.org/~petere/
---(end of broadcast)---
TIP 4: Have you searched our list archives?
>From what you said:
I agreed this would work, and enhanced
this by copying a trick from the SASL people where the key would be
concatenated with a constant secret string to further prevent people
from guessing how to crack the numbering scheme
under definition of security, Something that
Darcy Buskermolen wrote:
We don't need access to that file, but install some sql files into
the share dir, the test for postgresql.conf.sample is there just to
see if the dir looks like a likely candidate to be the dir we are
infact after..
Then my response is that Slony has absolutely no
One reason to use a UUID type over a naively stored hash for this purpose is that it takes up half the space as naively stored MD5 and 40% of the space as naively stored SHA1. Granted, it's easy enough to pack them, but packed MD5 does have the same storage requirements as UUID and it won't be
On Thu, 2005-09-08 at 13:14 +1200, Oliver Jowett wrote:
Simon Riggs wrote:
On Tue, 2005-09-06 at 07:47 +, Oliver Jowett wrote:
Simon Riggs wrote:
Looking more closely, I don't think either is correct. Both can be reset
according to rewind operations - see DoPortalRewind().
We'd need
Andrew - Supernews [EMAIL PROTECTED] writes:
On 2005-09-08, Tom Lane [EMAIL PROTECTED] wrote:
initdb is really the wrong place for this anyway, because in many
situations (RPM installations for instance) initdb is run behind the
scenes with no opportunity for user interaction. We should be
On Thu, 2005-09-08 at 09:53 -0700, Josh Berkus wrote:
Takahiro,
PostgreSQL can treat variable-length data flexibly, but therefore
it consumes more spaces if we store short data. Headers of
variable-length types use 4 bytes regardless of the data length.
My idea is to change the header
On Wed, Sep 07, 2005 at 09:22:55PM -0400, Tom Lane wrote:
Alvaro Herrera [EMAIL PROTECTED] writes:
On Wed, Sep 07, 2005 at 12:38:44AM -0500, Jim C. Nasby wrote:
Is it too late to add a function that returns last reset time as well?
That would cover all bases and force some less confusing
Thomas Hallgren wrote:
GCJ currently that has limited security. It is 2 years behind
mainstream in versions (they don't have Java 5 yet and their Java 1.4
support is not complete). It is not stable and the performance is
nowhere close to the commercial implementations.
Frankly, that is all
Bricklen Anderson [EMAIL PROTECTED] writes:
I may have missed it in the docs, but were certain timestamp abbreviations
phased out between 8.0.3 and 8.1 beta1?
eg.
(8.0.3)
#SELECT TIMESTAMP '2001-02-16 20:38:40' AT TIME ZONE 'PST';
timezone
-
16/02/2001
Peter Eisentraut wrote:
Darcy Buskermolen wrote:
We don't need access to that file, but install some sql files into
the share dir, the test for postgresql.conf.sample is there just to
see if the dir looks like a likely candidate to be the dir we are
infact after..
Then my response
Peter Eisentraut wrote:
Thomas Hallgren wrote:
GCJ currently that has limited security. It is 2 years behind
mainstream in versions (they don't have Java 5 yet and their Java 1.4
support is not complete). It is not stable and the performance is
nowhere close to the commercial
ITAGAKI Takahiro wrote:
# select * from pgstattuple('txttbl');
-[ RECORD 1 ]--+--
table_len | 8192
tuple_count| 1
tuple_len | 57-- 28 + (5+3) + (5+3) + (5+3) + (5)
...
# select * from pgstattuple('strtbl');
-[ RECORD 1 ]--+--
table_len |
Andrew Dunstan wrote:
I have a single instance of apache running on this machine. It's not
doing anything, but even so it's consuming 20% of physical memory. By
contrast, my 3 postmasters are each consuming 0.5% of memory. All
If I see this right, my Apache, running at default settings, uses
On 9/8/05 9:53 AM, Josh Berkus josh@agliodbs.com wrote:
Hmmm. Seems like these would be different data types from the standard ones
we deal with. I can see the value for data warehousing, for example.
Wouldn't this require creating, for example, a SHORTTEXT type? Or were you
planning
Christian,
Regarding Configurator, has anything been done yet, or is it in the
planning stage?
Yes, I have a spreadsheet mapping the values we want to configure for 8.0.
Dave Cramer has done a partial implementation in Java using Drools; the
perl implementation is lagging rather further
Thomas Hallgren wrote:
Frankly, that is all FUD.
No, that's all facts.
Those two are not mutually exclusive.
We where discussing a very specific situation here. Not GCJ in
general. As you pointed out yourself (and that's what started this
discussion), GCJ cannot be used for a trusted Java
Tom Lane wrote:
[EMAIL PROTECTED] writes:
I don't recall ever hearing that this has been done.
bonjour is the new name of Apple's rendezvous technology, an old email
(http://archives.postgresql.org/pgsql-hackers/2005-05/msg00739.php) stated
that rendezvous support was working
Andrew Dunstan wrote:
Why be so prescriptive?
We're not prescribing anything. You can install your stuff anywhere you
want to, but we're certainly not going to encourage or facilitate that
other software installs files in directories that belong to PostgreSQL,
except where this is
On Thu, 2005-09-08 at 09:17 -0400, Tom Lane wrote:
You're right, it wouldn't be necessary to tear down the socket --- but
it *would* be necessary to have two network round trips. And the point
remains that in most scenarios the client and server will be of similar
vintages and so wish to
Tom Lane wrote:
Actually, I've just been discussing this with Red Hat's gcj people in
connection with a different project. What they say is that the Java
security manager is completely implemented now, but what is still
missing is that it's possible to bypass Java security if you can execute
Peter Eisentraut wrote:
The way I was reading your statements was that you concluded from this
sitation that GCJ should not be used at all for real work.
I see your point and my way of expressing it was probably too harsh. I
agree that there are many applications where an unsafe VM can be
I wrote:
Well, that's exactly the point Peter is arguing: he thinks (if I
understand correctly) that the template mechanism should only be used
for stuff that's included with the core distribution. I disagree;
I have seldom seen any good reason for restricting mechanisms to work
with only
On 2005-09-08, Peter Eisentraut [EMAIL PROTECTED] wrote:
Andrew - Supernews wrote:
Running initdb behind the scenes is a proven dangerous practice
Please elaborate.
Example instance:
http://archives.postgresql.org/pgsql-hackers/2004-12/msg00851.php
More generally, you risk running initdb and
James William Pye [EMAIL PROTECTED] writes:
The point is to give client authors the ability to authoritatively
resolve ambiguity that may exist in multiversion supporting clients and
to do so without any version specific code(or at a minimum wrt older
servers) or fingerprinting of any sort.
On 8-Sep-05, at 3:45 PM, Thomas Hallgren wrote:
Tom Lane wrote:
Actually, I've just been discussing this with Red Hat's gcj people in
connection with a different project. What they say is that the Java
security manager is completely implemented now, but what is still
missing is that it's
Thomas Hallgren [EMAIL PROTECTED] writes:
That's great news for PL/Java (and for Java in general of course). Did
they mention a release date?
You can have it today if you feel like downloading Fedora Rawhide.
(Actually you might want to wait till tomorrow -- I hear rawhide is
pretty borked at
Andrew Dunstan [EMAIL PROTECTED] writes:
Tom Lane wrote:
One possibility is that bonjour-for-windows *does* have the original
file name (DNSServiceDiscovery.h) if you install it on a filesystem
supporting long names, but you dropped it on an 8+3 filesystem instead?
No, that is indeed the
Peter Eisentraut [EMAIL PROTECTED] writes:
Thomas Hallgren wrote:
PL/Java is designed to run perfectly safe with a JVM that has the
correct features implemented. GCJ has serious issues with security
and I don't see that PL/Java, nor PostgreSQL should make any attempt
to fix them.
Well, we
There's been some discussion about loading of external modules and
getting the right function definitions. I was wondering if it would be
an idea to have the install scripts inside the module itself. Create a
command called:
INSTALL word | 'full path'
Would search for $libdir/{word}.so (or full
On Thu, 2005-09-08 at 16:27 -0400, Tom Lane wrote:
Had we had such a facility from the beginning, it would indeed have that
benefit. But unless you are going to start out by dropping client-side
support for all extant server versions, you will not get any such
benefit; you'll still need retry
Andrew - Supernews wrote:
On 2005-09-08, Peter Eisentraut [EMAIL PROTECTED] wrote:
Andrew - Supernews wrote:
Running initdb behind the scenes is a proven dangerous practice
Please elaborate.
Example instance:
http://archives.postgresql.org/pgsql-hackers/2004-12/msg00851.php
If you run
Andrew Dunstan wrote:
Tom Lane wrote:
Grumble. Are you going to send in a patch? I can test that the OS X
side still works, but I can't test Windows.
I can make a patch and see that it configures and compiles. But I
can't test it.
I guess that will be an advance, though.
It
Andrew Dunstan [EMAIL PROTECTED] writes:
It gets a lot worse. The Windows SDK does not export the same API. None
of the DNSfoo things we refer to in postmaster.c are defined in the
supplied header file (not to mention other idiocies I was able to
negotiate past). Apparently Apple have never
Tom Lane wrote:
Andrew Dunstan [EMAIL PROTECTED] writes:
It gets a lot worse. The Windows SDK does not export the same API. None
of the DNSfoo things we refer to in postmaster.c are defined in the
supplied header file (not to mention other idiocies I was able to
negotiate past).
Great :-(. Well, until there's actually some value in supporting
bonjour on non-Apple platforms, let's just leave the code as it is.
I can't see plastering the code with a ton of #ifdefs to support
something that no Windows users will care about.
Lets at least document the fact that it is
Joshua D. Drake [EMAIL PROTECTED] writes:
Lets at least document the fact that it is borked on everything but
apple
borked on windows is not necessarily the same thing as borked on
everything but apple.
BTW, wasn't it you that sent in that old note that said it did work
on windows? What
borked on windows is not necessarily the same thing as borked on
everything but apple.
BTW, wasn't it you that sent in that old note that said it did work
on windows? What did you test exactly?
Not I. The only thing I have ever noted with Rendezvous/Bonjour
was the whole trademark issue
Not I. The only thing I have ever noted with Rendezvous/Bonjour
was the whole trademark issue with the name.
Sincerely,
Joshua D. Drake
I retract the above statement. As Andrew kindly pointed it out I did mention
that it works on Windows. Unfortunately I was taking that from
literature
Josh Berkus josh@agliodbs.com wrote:
Wouldn't this require creating, for example, a SHORTTEXT type?
Yes, new types are required. There are no binary compatibility between
them and existing variable length types (text, bytea, etc.).
But 'SHORTTEXT' is not a proper name for them. They can
I wrote:
This is not good. We put in code to support the zic timezone names,
but we weren't supposed to be removing anything that worked before.
I've committed a fix for this.
regards, tom lane
---(end of broadcast)---
I am still in Sri Lanka and am having a great time. Their hospitality
is well known. Unfortunately, I have not had a block of hours to read
email and prepare for beta2.
I recommend the group continue with beta2. Someone can update the
release notes or I will do them before beta3. There are
ITAGAKI Takahiro [EMAIL PROTECTED] writes:
If the new text type wins VARCHAR in many respects,
I'd like to propose to replace VARCHAR with it.
This idea would impose fairly significant overhead in a number of
places, for instance locating field starts within a tuple. It didn't
appear to me
Rupa Schomaker (lists) [EMAIL PROTECTED] writes:
How are dumps/restores of local modifications to the template going to
be handled?
pg_dump has no business trying to save or restore the template data;
if it did so then we'd just have moved the original problem of obsolete
data to a different
unsubscribe [EMAIL PROTECTED]
---(end of broadcast)---
TIP 1: if posting/reading through Usenet, please send an appropriate
subscribe-nomail command to [EMAIL PROTECTED] so that your
message can get through to the mailing list cleanly
On 9/8/2005 9:20 PM, Tom Lane wrote:
Rupa Schomaker (lists) [EMAIL PROTECTED] writes:
How are dumps/restores of local modifications to the template going to
be handled?
pg_dump has no business trying to save or restore the template data;
if it did so then we'd just have moved the original
On Thu, 8 Sep 2005, Tom Lane wrote:
I've committed the changes to have a system catalog in place of the
hard-wired table. In the initial commit, I listed only the languages
included in the core distribution.
If I understand this correct you have created a system table that contain
the
Rupa Schomaker (lists) [EMAIL PROTECTED] writes:
Situation: A user installs a third-party PL that installs itself by
updating the template catalog and then doing a createlang.
Can the user simply do a dumpall/restore and get back into working
order. Or will the user have to re-run the PL
Dennis Bjorklund [EMAIL PROTECTED] writes:
Doesn't this make it hard for distributions to package up a language in a
rpm (or some other system) and have it just work?
No, it makes it easier. Particularly when you think about altering the
implementation details of that language across
Andrew Dunstan [EMAIL PROTECTED] wrote
IIRC, Peter Eisentraut noted a while ago that implementing the SQL/XML
functions properly would require building them into the postgresql parser
as special cases. That of course would mean we wouldn't be using the
extension mechanism, and is
77 matches
Mail list logo
