pgsql: Superuser can permit passwordless connections on postgres_fdw
Andrew Dunstan <andrew@dunslane.net>
From: Andrew Dunstan <andrew@dunslane.net>
To: pgsql-committers@lists.postgresql.org
Date: 2019-12-20T05:55:10Z
Lists: pgsql-hackers
Superuser can permit passwordless connections on postgres_fdw Currently postgres_fdw doesn't permit a non-superuser to connect to a foreign server without specifying a password, or to use an authentication mechanism that doesn't use the password. This is to avoid using the settings and identity of the user running Postgres. However, this doesn't make sense for all authentication methods. We therefore allow a superuser to set "password_required 'false'" for user mappings for the postgres_fdw. The superuser must ensure that the foreign server won't try to rely solely on the server identity (e.g. trust, peer, ident) or use an authentication mechanism that relies on the password settings (e.g. md5, scram-sha-256). This feature is a prelude to better support for sslcert and sslkey settings in user mappings. Author: Craig Ringer. Discussion: https://postgr.es/m/075135da-545c-f958-fed0-5dcb462d6dae@2ndQuadrant.com Branch ------ master Details ------- https://git.postgresql.org/pg/commitdiff/6136e94dcb88c50b6156aa646746565400e373d4 Modified Files -------------- contrib/postgres_fdw/connection.c | 42 +++++++++--- contrib/postgres_fdw/expected/postgres_fdw.out | 94 ++++++++++++++++++++++++++ contrib/postgres_fdw/option.c | 19 ++++++ contrib/postgres_fdw/sql/postgres_fdw.sql | 86 +++++++++++++++++++++++ doc/src/sgml/postgres-fdw.sgml | 24 +++++++ 5 files changed, 257 insertions(+), 8 deletions(-)
Commits
-
Adjust test case added by commit 6136e94dc.
- 0af0504da91e 13.0 landed
-
libpq should expose GSS-related parameters even when not implemented.
- d09cfa3e2874 10.12 landed
- c11bd6c10fe5 9.6.17 landed
- 875c7d70def6 9.4.26 landed
- 5e22a111185c 9.5.21 landed
- 1a77ea02dca5 11.7 landed
- e8f60e6fe206 12.2 landed
- e60b480d39ee 13.0 landed
-
Superuser can permit passwordless connections on postgres_fdw
- 6136e94dcb88 13.0 cited