Re: Proposal: Save user's original authenticated identity for logging

Jacob Champion <pchampion@vmware.com>

From: Jacob Champion <pchampion@vmware.com>

To: "michael@paquier.xyz" <michael@paquier.xyz>

Cc: "magnus@hagander.net" <magnus@hagander.net>, "stark@mit.edu" <stark@mit.edu>, "pgsql-hackers@postgresql.org" <pgsql-hackers@postgresql.org>, "sfrost@snowman.net" <sfrost@snowman.net>, "tgl@sss.pgh.pa.us" <tgl@sss.pgh.pa.us>

Date: 2021-03-22T19:17:26Z

Lists: pgsql-hackers

Attachments

v9-0001-ssl-store-client-s-DN-in-port-peer_dn.patch (text/x-patch) patch v9-0001
v9-0002-Log-authenticated-identity-from-all-auth-backends.patch (text/x-patch) patch v9-0002

On Mon, 2021-03-22 at 15:16 +0900, Michael Paquier wrote:
> On Fri, Mar 19, 2021 at 06:37:05PM +0000, Jacob Champion wrote:
> > The same effect can be had by moving the log rotation to the top of the
> > test that needs it, so I've done it that way in v7.
> 
> After thinking more about 0001, I have come up with an even simpler
> solution that has resulted in 11e1577.  That's similar to what
> PostgresNode::issues_sql_like() does.  This also makes 0003 simpler
> with its changes as this requires to change two lines in test_access.
v8's test_access lost the in-order log search from v7; I've added it
back in v9. The increased resistance to entropy seems worth the few
extra lines. Thoughts?

--Jacob

Commits

Add missing $Test::Builder::Level settings
- 73aa5e0cafd0 15.0 landed
- e536a2683439 14.0 landed
Add some information about authenticated identity via log_connections
- 9afffcb833d3 14.0 landed
Fix some issues with SSL and Kerberos tests
- 5a71964a832f 14.0 landed
Refactor all TAP test suites doing connection checks
- c50624cdd248 14.0 landed