Re: [HACKERS] SSPI authentication

[plabrh1]

Just the SSPI piece.  

Right now we run a mixture of PostgreSQL and SQL Server and the one
fustrating thing is that we have to have separate security architectures for
them.  The SQL Server environment is nice because it allows SSPI and
eliminates the need to pass around passwords everywhere.  

In the postgres environment, we've worked around that by Trusting the
postgres user from certain locked down and protected IP addresses so that we
don't need to store passwords but that would never win any security awards.
:)

SSPI will enable us to create services that run as that registered user and
as long as that user can obtain an authenticated kerb ticket, we can ensure
that are the user they say they are.  Much nicer model...

Looking forward to this release.  When will it be available?

Paul







-Original Message-
From: Magnus Hagander [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, July 18, 2007 6:42 AM
To: Paul Silveira
Cc: pgsql-hackers@postgresql.org
Subject: Re: [HACKERS] SSPI authentication

On Tue, Jul 17, 2007 at 11:00:35AM -0700, Paul Silveira wrote:
 
 This is great.  I've worked on 2 projects in the last year that
desperately
 needed this.  It will certainly make the security model more seamless...

Thanks for letting us know.

Are you interested in just the SSPI parts, or also in being able to use
both SSPI and GSSAPI at the same time?

//Magnus


---(end of broadcast)---
TIP 3: Have you checked our extensive FAQ?

   http://www.postgresql.org/docs/faq

Re: [HACKERS] Proposal for Implenting read-only queries during wal replay (SoC 2007)

[plabrh1]

Thanks Josh,

I'll look for the earlier one and try to add it there...

-Paul



-Original Message-
From: Joshua D. Drake [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, February 28, 2007 12:09 AM
To: Paul Silveira
Cc: pgsql-hackers@postgresql.org
Subject: Re: [HACKERS] Proposal for Implenting read-only queries during wal
replay (SoC 2007)

Paul Silveira wrote:
 Hello,
 
 I just wanted to voice my opinion for this feature...  I've implemented a
 few Production applicaitons with PostgreSQL now and would die for that
 feature.  Right now, I am constantly trying to find way's to make my data
 more available. 

Paul unfortunately you have responded to a hijacked thread. Jonah was
speaking about a project that he wishes would have been accepted which
was called Full Disjunctions.

I have not read the read-only queries during wal replay thread but I can
assure you that Jonah's response had nothing to do with it.

Joshua D. Drake



 I've even resulted to using pg_dump to create read only
 copies of the database and placed them behind load balancers to make the
 data more available.  Something like this would allow me to quickly
leverage
 a read only node to scale out the applicaiton...  If it can at all be
built,
 it would get my first, second and third vote. :)
 
 Regards,
 
 Paul Silveira
 
 
 
 
 Jonah H. Harris-2 wrote:
 On 2/26/07, Bruce Momjian [EMAIL PROTECTED] wrote:
 Jonah, I have no idea what fault you are trying to blame on the
 community in the above statement.  The author didn't discuss the idea
 with the community before spending months on it so we have no obligation
 to accept it in the core.
 You're missing the point entirely.  The majority of the (vocal)
 community didn't even want the feature and as such, failed to provide
 viable suggestions for him to move forward.  As the majority of the
 community didn't want the feature, it wouldn't have made a difference
 when he proposed it; which would have remained negative nonetheless.

 -- 
 Jonah H. Harris, Software Architect | phone: 732.331.1324
 EnterpriseDB Corporation| fax: 732.331.1301
 33 Wood Ave S, 3rd Floor| [EMAIL PROTECTED]
 Iselin, New Jersey 08830| http://www.enterprisedb.com/

 ---(end of broadcast)---
 TIP 7: You can help support the PostgreSQL project by donating at

 http://www.postgresql.org/about/donate


 


-- 

  === The PostgreSQL Company: Command Prompt, Inc. ===
Sales/Support: +1.503.667.4564 || 24x7/Emergency: +1.800.492.2240
Providing the most comprehensive  PostgreSQL solutions since 1997
 http://www.commandprompt.com/

Donate to the PostgreSQL Project: http://www.postgresql.org/about/donate
PostgreSQL Replication: http://www.commandprompt.com/products/


---(end of broadcast)---
TIP 4: Have you searched our list archives?

   http://archives.postgresql.org