Horton

Thread

  1. VALID UNTIL

    Euler Taveira de Oliveira <euler@timbira.com> — 2012-03-14T14:20:05Z

    Hi,

I have a hard time figuring out why my replication stopped with a message like

FATAL:  password authentication failed for user "foo"

in the logs. I thought it was some pg_hba.conf change, a pgpass modification,
or NOLOGIN option, it wasn't. I was out of options when I remembered to check
if there is a VALID OPTION option set. For my surprise, it wasn't exposed by
\du or even \du+.

euler=# \du
List of roles
-[ RECORD 1 ]----------------------------------------------
Role name  | euler
Attributes | Superuser, Create role, Create DB, Replication
Member of  | {}
-[ RECORD 2 ]----------------------------------------------
Role name  | foo
Attributes |
Member of  | {}

euler=# \du+
List of roles
-[ RECORD 1 ]-----------------------------------------------
Role name   | euler
Attributes  | Superuser, Create role, Create DB, Replication
Member of   | {}
Description |
-[ RECORD 2 ]-----------------------------------------------
Role name   | foo
Attributes  |
Member of   | {}
Description |

but after checking in the catalog I got it.

test=# select rolname,rolvaliduntil from pg_authid;
 rolname |     rolvaliduntil
---------+------------------------
 euler   |
 foo     | 2012-03-01 00:00:00-03
(2 rows)

Is there any reason why it is not exposed? What about exposing that
information in attributes or even in a separate column? It could help
troubleshooting quickly on this case.


-- 
   Euler Taveira de Oliveira - Timbira       http://www.timbira.com.br/
   PostgreSQL: Consultoria, Desenvolvimento, Suporte 24x7 e Treinamento

  2. Re: VALID UNTIL

    David Fetter <david@fetter.org> — 2012-03-14T14:59:34Z

    On Wed, Mar 14, 2012 at 11:20:05AM -0300, Euler Taveira de Oliveira wrote:
> Hi,
> 
> I have a hard time figuring out why my replication stopped with a message like
> 
> FATAL:  password authentication failed for user "foo"
> 
> in the logs. I thought it was some pg_hba.conf change, a pgpass modification,
> or NOLOGIN option, it wasn't. I was out of options when I remembered to check
> if there is a VALID OPTION option set. For my surprise, it wasn't exposed by
> \du or even \du+.
> 
> Is there any reason why it is not exposed?

Oversight.

> What about exposing that information in attributes or even in a
> separate column? It could help troubleshooting quickly on this case.

I don't know how frequently people use VALID UNTIL, but I'm guessing
it's not terribly often because yours is the first comment about how
it's not exposed, so I'd tend toward putting it in attributes rather
than a separate column.

Cheers,
David.
-- 
David Fetter <david@fetter.org> http://fetter.org/
Phone: +1 415 235 3778  AIM: dfetter666  Yahoo!: dfetter
Skype: davidfetter      XMPP: david.fetter@gmail.com
iCal: webcal://www.tripit.com/feed/ical/people/david74/tripit.ics

Remember to vote!
Consider donating to Postgres: http://www.postgresql.org/about/donate

  3. Re: VALID UNTIL

    Fabrízio de Royes Mello <fabriziomello@gmail.com> — 2012-03-14T15:37:20Z

    2012/3/14 David Fetter <david@fetter.org>

>
> I don't know how frequently people use VALID UNTIL, but I'm guessing
> it's not terribly often because yours is the first comment about how
> it's not exposed, so I'd tend toward putting it in attributes rather
> than a separate column.
>
>
If it's desired I can write a patch to put "Valid until" into attributes
column.

-- 
Fabrízio de Royes Mello
Consultoria/Coaching PostgreSQL
>> Blog sobre TI: http://fabriziomello.blogspot.com
>> Perfil Linkedin: http://br.linkedin.com/in/fabriziomello
>> Twitter: http://twitter.com/fabriziomello

  4. Re: VALID UNTIL

    Fabrízio de Royes Mello <fabriziomello@gmail.com> — 2012-03-14T22:56:16Z

    2012/3/14 David Fetter <david@fetter.org>

>
> I don't know how frequently people use VALID UNTIL, but I'm guessing
> it's not terribly often because yours is the first comment about how
> it's not exposed, so I'd tend toward putting it in attributes rather
> than a separate column.
>
>
The attached patch put VALID UNTIL into attributes column in verbose mode
like example above.

bdteste=# \du
                             List of roles
 Role name |                   Attributes                   | Member of
-----------+------------------------------------------------+-----------
 bucardo   | Superuser, Create role, Create DB, Replication | {}
 postgres  | Superuser, Create role, Create DB, Replication | {}

bdteste=# \du+
                                                          List of roles
 Role name |                                        Attributes
                            | Member of | Description
-----------+-------------------------------------------------------------------------------------------+-----------+--------------
 bucardo   | Superuser, Create role, Create DB, Valid until 2012-12-31
23:59:59.999999-02, Replication | {}        | bucardo role
 postgres  | Superuser, Create role, Create DB, Replication
                           | {}        |


Regards,

-- 
Fabrízio de Royes Mello
Consultoria/Coaching PostgreSQL
>> Blog sobre TI: http://fabriziomello.blogspot.com
>> Perfil Linkedin: http://br.linkedin.com/in/fabriziomello
>> Twitter: http://twitter.com/fabriziomello

  5. Re: VALID UNTIL

    Tom Lane <tgl@sss.pgh.pa.us> — 2012-03-15T00:21:00Z

    =?ISO-8859-1?Q?Fabr=EDzio_de_Royes_Mello?= <fabriziomello@gmail.com> writes:
> The attached patch put VALID UNTIL into attributes column in verbose mode
> like example above.

Why would you confine it to verbose mode?  For most people it won't
matter, but for people who are using the feature, it seems like
important information.  Per the OP's complaint, it's particularly
important for those who have forgotten they're using the feature
(and hence would not think to specify "+" ...)

			regards, tom lane

  6. Re: VALID UNTIL

    Fabrízio de Royes Mello <fabriziomello@gmail.com> — 2012-03-15T00:40:18Z

    2012/3/14 Tom Lane <tgl@sss.pgh.pa.us>

>
> Why would you confine it to verbose mode?


Because I did not want to change the current behavior of this psql
command... but...


For most people it won't
> matter, but for people who are using the feature, it seems like
> important information.  Per the OP's complaint, it's particularly
> important for those who have forgotten they're using the feature
> (and hence would not think to specify "+" ...)
>
>
You' re right, then I attached a new patch with your suggestion.

Regards,

-- 
Fabrízio de Royes Mello
Consultoria/Coaching PostgreSQL
>> Blog sobre TI: http://fabriziomello.blogspot.com
>> Perfil Linkedin: http://br.linkedin.com/in/fabriziomello
>> Twitter: http://twitter.com/fabriziomello

  7. Re: VALID UNTIL

    Tom Lane <tgl@sss.pgh.pa.us> — 2012-03-22T06:09:34Z

    =?ISO-8859-1?Q?Fabr=EDzio_de_Royes_Mello?= <fabriziomello@gmail.com> writes:
> 2012/3/14 Tom Lane <tgl@sss.pgh.pa.us>
>> For most people it won't
>> matter, but for people who are using the feature, it seems like
>> important information.  Per the OP's complaint, it's particularly
>> important for those who have forgotten they're using the feature
>> (and hence would not think to specify "+" ...)

> You' re right, then I attached a new patch with your suggestion.

Applied with minor corrections (mostly, ensuring the displayed text
is translatable).

			regards, tom lane