Re: Proposal: Save user's original authenticated identity for logging

Jacob Champion <pchampion@vmware.com>

From: Jacob Champion <pchampion@vmware.com>

To: "magnus@hagander.net" <magnus@hagander.net>

Cc: "stark@mit.edu" <stark@mit.edu>, "pgsql-hackers@postgresql.org" <pgsql-hackers@postgresql.org>, "sfrost@snowman.net" <sfrost@snowman.net>, "tgl@sss.pgh.pa.us" <tgl@sss.pgh.pa.us>

Date: 2021-03-15T15:50:48Z

Lists: pgsql-hackers

Attachments

v6-0001-test-kerberos-only-search-forward-in-logs.patch (text/x-patch) patch v6-0001
v6-0002-ssl-store-client-s-DN-in-port-peer_dn.patch (text/x-patch) patch v6-0002
v6-0003-Log-authenticated-identity-from-all-auth-backends.patch (text/x-patch) patch v6-0003

On Tue, 2021-03-09 at 19:10 +0000, Jacob Champion wrote:
> And v5 is rebased over this morning's SSL test changes.
Rebased again after the SSL test revert (this is the same as v4).

--Jacob

Commits

Add missing $Test::Builder::Level settings
- 73aa5e0cafd0 15.0 landed
- e536a2683439 14.0 landed
Add some information about authenticated identity via log_connections
- 9afffcb833d3 14.0 landed
Fix some issues with SSL and Kerberos tests
- 5a71964a832f 14.0 landed
Refactor all TAP test suites doing connection checks
- c50624cdd248 14.0 landed