Re: Logging of matching pg_hba.conf entry during auth skips trust auth, potential security issue

Jacob Champion <jchampion@timescale.com>

View thread View on postgr.es

From: Jacob Champion <jchampion@timescale.com>

To: Stephen Frost <sfrost@snowman.net>

Cc: Shaun Thomas <shaun.thomas@enterprisedb.com>, Michael Paquier <michael@paquier.xyz>, pgsql-hackers@postgresql.org

Date: 2023-08-17T16:53:34Z

Lists: pgsql-hackers

Attachments

v2-0001-log_connections-add-entries-for-trust-connections.patch (text/x-patch) patch v2-0001

On Thu, Aug 17, 2023 at 9:46 AM Stephen Frost <sfrost@snowman.net> wrote:
> Don't like 'skipped' but that feels closer.
>
> How about 'connection bypassed authentication'?

Works for me; see v2.

Thanks!
--Jacob

Commits

Generate new LOG for "trust" connections under log_connections
- e48b19c5db31 17.0 landed
Add some information about authenticated identity via log_connections
- 9afffcb833d3 14.0 cited