Re: Proposal: Save user's original authenticated identity for logging

Jacob Champion <pchampion@vmware.com>

From: Jacob Champion <pchampion@vmware.com>

To: "magnus@hagander.net" <magnus@hagander.net>

Cc: "stark@mit.edu" <stark@mit.edu>, "pgsql-hackers@postgresql.org" <pgsql-hackers@postgresql.org>, "sfrost@snowman.net" <sfrost@snowman.net>, "tgl@sss.pgh.pa.us" <tgl@sss.pgh.pa.us>

Date: 2021-03-09T19:10:52Z

Lists: pgsql-hackers

Attachments

v5-0001-test-kerberos-only-search-forward-in-logs.patch (text/x-patch) patch v5-0001
v5-0002-ssl-store-client-s-DN-in-port-peer_dn.patch (text/x-patch) patch v5-0002
v5-0003-Log-authenticated-identity-from-all-auth-backends.patch (text/x-patch) patch v5-0003

On Tue, 2021-03-09 at 18:03 +0000, Jacob Champion wrote:
> v4 removes the TODO and the extra allocation for peer_user. I'll hold
> off on the other two suggestions pending that conversation.

And v5 is rebased over this morning's SSL test changes.

--Jacob

Commits

Add missing $Test::Builder::Level settings
- 73aa5e0cafd0 15.0 landed
- e536a2683439 14.0 landed
Add some information about authenticated identity via log_connections
- 9afffcb833d3 14.0 landed
Fix some issues with SSL and Kerberos tests
- 5a71964a832f 14.0 landed
Refactor all TAP test suites doing connection checks
- c50624cdd248 14.0 landed