Re: [HACKERS] Practical impediment to supporting multiple SSL libraries

2006-04-12 Thread Martijn van Oosterhout
On Wed, Apr 12, 2006 at 05:25:47PM +0100, Dave Page wrote: > The driver implements all versions of the wire protocol itself, but if > libpq is available at runtime (it will dynamically load it on platforms > that support it) it can use it for connection setup so features like SSL > can be provided

Re: [HACKERS] Practical impediment to supporting multiple SSL libraries

2006-04-12 Thread Martijn van Oosterhout
On Wed, Apr 12, 2006 at 05:00:17PM -0400, Tom Lane wrote: > > Issuer (name and certificate), validity dates, basic constraints, key > > usage, posslby fingerprint. > > I think that way madness lies --- do we really want to commit to > re-inventing an SSL API that will cover anything someone might w

Re: [HACKERS] Control File

2006-04-12 Thread Tom Lane
Bruce Momjian writes: > Bruno Almeida do Lago wrote: >> After that night, I started to ask myself if PostgreSQL should not have a >> control file to check if expected datafiles are where they should be and >> JUST warn about missing ones? > I don't think this happens frequently enough to add code

Re: [HACKERS] Speaking of pgstats

2006-04-12 Thread Bruce Momjian
Tom Lane wrote: > "Magnus Hagander" <[EMAIL PROTECTED]> writes: > > While we're talking about pgstats... There was some talk a while back > > about the whole bufferer/collector combination perhaps being unnecessary > > as well, and that it might be a good idea to simplify it down to just a > > col

Re: [HACKERS] Control File

2006-04-12 Thread Bruce Momjian
Bruno Almeida do Lago wrote: > DBA takes another coffee and finally started the database which... just came > up! Few minutes latter lot off errors being displayed. What is that??? > /mnt/array2 (50% of datafiles and tablespaces were there) was still umounted > and even so PostgreSQL came up. -- Po

Re: [HACKERS] Get explain output of postgresql in Tables

2006-04-12 Thread Jim C. Nasby
On Wed, Apr 12, 2006 at 07:28:25PM -0400, Alvaro Herrera wrote: > Dave Page escribi?: > > > > Alvaro Herrera <[EMAIL PROTECTED]> writes: > > > > It would be nice to see the "visual explain" tool that Denis wrote -- > > > > did he finish it? Is it available somewhere? Are there any > > > > scree

Re: [HACKERS] Get explain output of postgresql in Tables

2006-04-12 Thread Alvaro Herrera
Dave Page escribió: > > Alvaro Herrera <[EMAIL PROTECTED]> writes: > > > It would be nice to see the "visual explain" tool that Denis wrote -- > > > did he finish it? Is it available somewhere? Are there any screenshots? > > > Red Hat did one of these some years ago: > > http://sources.redhat.c

Re: [HACKERS] Get explain output of postgresql in Tables

2006-04-12 Thread Jim C. Nasby
On Wed, Apr 12, 2006 at 03:34:05PM -0700, Josh Berkus wrote: > If we have an XML patch now, I say use it. I know I want it. Certainly; XML is better than nothing. But since it shouldn't be hard to add the ability to output a recordset at the same time... -- Jim C. Nasby, Sr. Engineering Consult

Re: [HACKERS] Practical impediment to supporting multiple SSL libraries

2006-04-12 Thread Hiroshi Inoue
Martijn van Oosterhout wrote: >On Wed, Apr 12, 2006 at 05:03:32PM +0100, Dave Page wrote: > > > > >>The next version of psqlODBC (that has just gone into CVS tip after >>months of work and debate) uses it, and would break almost completely >>should it be removed, therefore any backwards incompat

Re: [HACKERS] Get explain output of postgresql in Tables

2006-04-12 Thread Greg Stark
"Jim C. Nasby" <[EMAIL PROTECTED]> writes: > Having an SQL format would make it easier to allow for a mode that > captures explain or explain analyze output from every query. Turn that > mode on, run an application's test suite, and now you have a pretty good > idea of how all the queries will ru

Re: [HACKERS] Get explain output of postgresql in Tables

2006-04-12 Thread Josh Berkus
Jim, > The list goes on. Like I said, you could do all these things with XML, > you just couldn't easily do them within the database. XML --> Table conversion should be relatively easy with PL/Perl, PL/Java, and/or an external language. Heck, if we could expand our XML tools (Peter will have

Re: [HACKERS] Get explain output of postgresql in Tables

2006-04-12 Thread Dave Page
-Original Message- From: "Tom Lane"<[EMAIL PROTECTED]> Sent: 12/04/06 23:03:08 To: "Alvaro Herrera"<[EMAIL PROTECTED]> Cc: "Germán Poó Caamaño"<[EMAIL PROTECTED]>, "Jim C. Nasby"<[EMAIL PROTECTED]>, "[EMAIL PROTECTED]"<[EMAIL PROTECTED]>, "pgsql-hackers@postgresql.org" Subject: Re: [HAC

Re: [HACKERS] Get explain output of postgresql in Tables

2006-04-12 Thread Hannu Krosing
Ühel kenal päeval, K, 2006-04-12 kell 17:42, kirjutas Alvaro Herrera: > It would be nice to see the "visual explain" tool that Denis wrote -- > did he finish it? Is it available somewhere? Are there any screenshots? IIRC there is a "visual explain" tool pin pgAdmin III --- Hannu

Re: [HACKERS] Get explain output of postgresql in Tables

2006-04-12 Thread Tom Lane
Alvaro Herrera <[EMAIL PROTECTED]> writes: > It would be nice to see the "visual explain" tool that Denis wrote -- > did he finish it? Is it available somewhere? Are there any screenshots? Red Hat did one of these some years ago: http://sources.redhat.com/rhdb/visualexplain.html I don't see a pr

Re: [HACKERS] Get explain output of postgresql in Tables

2006-04-12 Thread Hannu Krosing
Ühel kenal päeval, K, 2006-04-12 kell 14:38, kirjutas Jim C. Nasby: > Well, really just about anything you'd want to do with it in an XML > format. The advantage of SQL is that you can do it within the database, > and you don't have to worry about having something around that can > process XML. >

Re: [HACKERS] Get explain output of postgresql in Tables

2006-04-12 Thread Alvaro Herrera
Hi, Germán Poó Caamaño escribió: > We can get the best of both worlds. > > For instance, EXPLAIN and EXPLAIN ANALYZE with the usual output; but > also EXPLAIN XML and EXPLAIN ANALYZE XML with an XML syntax to be > used by programs. > > I have a patch for this behavior, but unfortunately this i

Re: [HACKERS] Practical impediment to supporting multiple SSL libraries

2006-04-12 Thread Tom Lane
"Magnus Hagander" <[EMAIL PROTECTED]> writes: >> Other than DN and CN, what else would people want? > Issuer (name and certificate), validity dates, basic constraints, key > usage, posslby fingerprint. I think that way madness lies --- do we really want to commit to re-inventing an SSL API that w

Re: [HACKERS] Get explain output of postgresql in Tables

2006-04-12 Thread Germán Poó Caamaño
On Wed, 2006-04-12 at 14:38 -0500, Jim C. Nasby wrote: > On Wed, Apr 12, 2006 at 09:45:41AM -0700, Mischa Sandberg wrote: > > Jim C. Nasby wrote: > > >On Wed, Apr 12, 2006 at 04:53:20PM +0200, Thomas Hallgren wrote: > > > > > >> > > >> > > >> > > >> > > >> > > > > > > > > >Well, the downs

Re: [HACKERS] GPUSort project

2006-04-12 Thread Mischa Sandberg
[short] This probably would be an uneasy fit into generic backend code. Was hoping the GPUSort project might have fleeced/sorted out some issues. [long] Simon Riggs wrote: On Wed, 2006-04-12 at 10:00 -0700, Mischa Sandberg wrote: ... Long answer: we're shipping a server (appliance) product buil

Re: [HACKERS] Get explain output of postgresql in Tables

2006-04-12 Thread Jim C. Nasby
On Wed, Apr 12, 2006 at 09:45:41AM -0700, Mischa Sandberg wrote: > Jim C. Nasby wrote: > >On Wed, Apr 12, 2006 at 04:53:20PM +0200, Thomas Hallgren wrote: > > > >> > >> > >> > >> > >> > > > > > >Well, the downside is that such a format means explain output is now > >twice as long. But I'd

Re: [HACKERS] GPUSort project

2006-04-12 Thread Simon Riggs
On Wed, 2006-04-12 at 10:00 -0700, Mischa Sandberg wrote: > Martijn van Oosterhout wrote: > > On Tue, Apr 11, 2006 at 04:02:07PM -0700, Mischa Sandberg wrote: > > > >>Anybody on this list hear/opine anything pf the GPUSort project for > >>postgresql? I'm working on a radix-sort subcase for tuples

Re: [HACKERS] Practical impediment to supporting multiple SSL libraries

2006-04-12 Thread Martijn van Oosterhout
On Wed, Apr 12, 2006 at 08:14:58PM +0200, Magnus Hagander wrote: > > Other than DN and CN, what else would people want? > > Issuer (name and certificate), validity dates, basic constraints, key > usage, posslby fingerprint. GnuTLS handles this with just one function: gnutls_x509_crt_get_dn_by_oi

Re: [HACKERS] Practical impediment to supporting multiple SSL libraries

2006-04-12 Thread Magnus Hagander
> > There is a more serious issue here though: if we allow more > than one > > SSL library, what exactly can an application safely do with the > > returned pointer? It strikes me as very dangerous for the app to > > assume it knows which SSL library is underneath libpq. It's not at > > all h

Re: [HACKERS] Practical impediment to supporting multiple SSL libraries

2006-04-12 Thread Martijn van Oosterhout
On Wed, Apr 12, 2006 at 12:32:01PM -0400, Tom Lane wrote: > There is a more serious issue here though: if we allow more than one SSL > library, what exactly can an application safely do with the returned > pointer? It strikes me as very dangerous for the app to assume it knows > which SSL library

Re: [HACKERS] Practical impediment to supporting multiple SSL libraries

2006-04-12 Thread Martijn van Oosterhout
On Wed, Apr 12, 2006 at 01:42:51PM -0400, Stephen Frost wrote: > * Andreas Pflug ([EMAIL PROTECTED]) wrote: > > I wonder if there are apps that actually use the ssl pointer, beyond > > detection of encrypted connections. So interpreting the result as bool > > would be sufficient. > > I'm not sur

Re: [HACKERS] Practical impediment to supporting multiple SSL libraries

2006-04-12 Thread Stephen Frost
* Andreas Pflug ([EMAIL PROTECTED]) wrote: > I wonder if there are apps that actually use the ssl pointer, beyond > detection of encrypted connections. So interpreting the result as bool > would be sufficient. I'm not sure if there are apps out there which use it for anything but a bool but ther

Re: [HACKERS] Practical impediment to supporting multiple SSL libraries

2006-04-12 Thread Stephen Frost
* Tom Lane ([EMAIL PROTECTED]) wrote: > Martijn van Oosterhout writes: > > 1. Changing it to always return (void*), irrespective of SSL > > ... > > Personally, I'm in favour of 1, because then we can get rid of the > > #include for openssl, so users don't have to have openssl headers > > installed

Re: [HACKERS] plpgsql by default

2006-04-12 Thread Andreas Pflug
Eric Lauzon wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Merlin Moncure Sent: 12 avril 2006 12:22 To: Neil Conway Cc: Tom Lane; David Fetter; Jim C. Nasby; Joshua D. Drake; [EMAIL PROTECTED]; pgsql-hackers@postgresql.org Subject: Re: [HACKE

Re: [HACKERS] plpgsql by default

2006-04-12 Thread Eric Lauzon
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Merlin Moncure > Sent: 12 avril 2006 12:22 > To: Neil Conway > Cc: Tom Lane; David Fetter; Jim C. Nasby; Joshua D. Drake; > [EMAIL PROTECTED]; pgsql-hackers@postgresql.org > Subject: Re: [HACKERS] p

Re: [HACKERS] Practical impediment to supporting multiple SSL libraries

2006-04-12 Thread Andreas Pflug
Tom Lane wrote: Martijn van Oosterhout writes: 1. Changing it to always return (void*), irrespective of SSL ... Personally, I'm in favour of 1, because then we can get rid of the #include for openssl, so users don't have to have openssl headers installed to compile postgresql programs. I li

Re: [HACKERS] Get explain output of postgresql in Tables

2006-04-12 Thread Mischa Sandberg
Greg Sabino Mullane wrote: I wonder if it would help much just to change EXPLAIN to indent with something other than spaces? I like that. Maybe even decrease the indenting a little more, and compress some of the inner whitespace (such as the 2 spaces after the operator name) Might it be wort

Re: [HACKERS] GPUSort project

2006-04-12 Thread Mischa Sandberg
Martijn van Oosterhout wrote: On Tue, Apr 11, 2006 at 04:02:07PM -0700, Mischa Sandberg wrote: Anybody on this list hear/opine anything pf the GPUSort project for postgresql? I'm working on a radix-sort subcase for tuplesort, and there are similarities. http://www.andrew.cmu.edu/user/ngm/15-

Re: [HACKERS] Get explain output of postgresql in Tables

2006-04-12 Thread Mischa Sandberg
Jim C. Nasby wrote: On Wed, Apr 12, 2006 at 04:53:20PM +0200, Thomas Hallgren wrote: Well, the downside is that such a format means explain output is now twice as long. But I'd love to see something like that as an option. I'd also still like to see an SQL-parseable version as

Re: [HACKERS] Practical impediment to supporting multiple SSL libraries

2006-04-12 Thread Tom Lane
Martijn van Oosterhout writes: > 1. Changing it to always return (void*), irrespective of SSL > ... > Personally, I'm in favour of 1, because then we can get rid of the > #include for openssl, so users don't have to have openssl headers > installed to compile postgresql programs. I like that too.

Re: [HACKERS] Practical impediment to supporting multiple SSL libraries

2006-04-12 Thread Dave Page
> -Original Message- > From: Martijn van Oosterhout [mailto:[EMAIL PROTECTED] > Sent: 12 April 2006 17:15 > To: Dave Page > Cc: pgsql-hackers@postgresql.org > Subject: Re: [HACKERS] Practical impediment to supporting > multiple SSL libraries > > On Wed, Apr 12, 2006 at 05:03:32PM +010

Re: [HACKERS] plpgsql by default

2006-04-12 Thread Merlin Moncure
On 4/11/06, Neil Conway <[EMAIL PROTECTED]> wrote: > On Tue, 2006-04-11 at 17:20 -0400, Tom Lane wrote: > > No, I'm saying that having access to a PL renders certain classes of > > attacks significantly more efficient. A determined attacker with > > unlimited time may not care, but in the real wor

Re: [HACKERS] Get explain output of postgresql in Tables

2006-04-12 Thread Greg Sabino Mullane
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > I wonder if it would help much just to change EXPLAIN to indent with > something other than spaces? I like that. Maybe even decrease the indenting a little more, and compress some of the inner whitespace (such as the 2 spaces after the operator na

Re: [HACKERS] Practical impediment to supporting multiple SSL libraries

2006-04-12 Thread Martijn van Oosterhout
On Wed, Apr 12, 2006 at 05:03:32PM +0100, Dave Page wrote: > The next version of psqlODBC (that has just gone into CVS tip after > months of work and debate) uses it, and would break almost completely > should it be removed, therefore any backwards incompatible change should > be avoided imho. An

Re: [HACKERS] Practical impediment to supporting multiple SSL libraries

2006-04-12 Thread Dave Page
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Martijn van Oosterhout > Sent: 12 April 2006 16:48 > To: pgsql-hackers@postgresql.org > Subject: [HACKERS] Practical impediment to supporting > multiple SSL libraries > > Just quickly going thro

Re: [HACKERS] plpgsql by default

2006-04-12 Thread David Fetter
On Wed, Apr 12, 2006 at 12:32:52PM +0200, Peter Eisentraut wrote: > Am Dienstag, 11. April 2006 23:20 schrieb Tom Lane: > > In the end it's only one small component of security, but any > > security expert will tell you that you take all the layers of > > security that you can get. > > I think wha

[HACKERS] Practical impediment to supporting multiple SSL libraries

2006-04-12 Thread Martijn van Oosterhout
Just quickly going through what might be needed to support multiple SSL libraries revealed one big problem in libpq-fe.h. #ifdef USE_SSL /* Get the SSL structure associated with a connection */ extern SSL *PQgetssl(PGconn *conn); #else extern void *PQgetssl(PGconn *conn); #endif The return type o

Re: [HACKERS] Get explain output of postgresql in Tables

2006-04-12 Thread Hannu Krosing
Ühel kenal päeval, K, 2006-04-12 kell 10:29, kirjutas Jim C. Nasby: > On Wed, Apr 12, 2006 at 04:53:20PM +0200, Thomas Hallgren wrote: > > > > > > > > > > > > Well, the downside is that such a format means explain output is now > twice as long. You can place end tags differently

Re: [HACKERS] Get explain output of postgresql in Tables

2006-04-12 Thread Jim C. Nasby
On Wed, Apr 12, 2006 at 04:53:20PM +0200, Thomas Hallgren wrote: > > > > > Well, the downside is that such a format means explain output is now twice as long. But I'd love to see something like that as an option. I'd also still like to see an SQL-parseable version as well, since I

Re: [HACKERS] Get explain output of postgresql in Tables

2006-04-12 Thread Thomas Hallgren
Richard Huxton wrote: Tom Lane wrote: I dislike the thought of encouraging people to post stuff in a not-easily-readable format. They won't do it anyway, if it's not default; look how we still can't get people to send EXPLAIN ANALYZE output the first time. It certainly needs to be one format

Re: [HACKERS] plpgsql by default

2006-04-12 Thread Bort, Paul
> > I wonder if Oracle ever recommended disabling PL/SQL (not to > mention MS Transact-SQL)... > Don't know abiout Oracle, but you can't disable Transact-SQL in SQL Server 7.0 or 2000 (don't know about 2003^h5) because Enterprise Manager and sp_help* require it. And +1 for not installing plpgs

Re: [HACKERS] plpgsql by default

2006-04-12 Thread Andreas Pflug
Dave Page wrote: Keeping PostgreSQL as secure as possible out of the box pretty much requires us to do the same in my mind - if an major feature such as pl/pgsql is easy for the user to enable should they want it, then it should be disabled by default to minimise the number of attack vectors

Re: [HACKERS] Get explain output of postgresql in Tables

2006-04-12 Thread Richard Huxton
Tom Lane wrote: I dislike the thought of encouraging people to post stuff in a not-easily-readable format. They won't do it anyway, if it's not default; look how we still can't get people to send EXPLAIN ANALYZE output the first time. It certainly needs to be one format for both purposes. O

Re: [HACKERS] Get explain output of postgresql in Tables

2006-04-12 Thread Tom Lane
Richard Huxton writes: > Jim C. Nasby wrote: >> Actually, I've been wondering about better ways to handle this. One >> thought is to come up with a non-human readable format that could easily >> be cut and pasted into a website that would then provide something easy >> to understand. Ideally that

Re: [HACKERS] plpgsql by default

2006-04-12 Thread Dave Page
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Peter Eisentraut > Sent: 12 April 2006 11:33 > To: pgsql-hackers@postgresql.org > Cc: Tom Lane; David Fetter; Jim C. Nasby; Joshua D. Drake; > [EMAIL PROTECTED] > Subject: Re: [HACKERS] plpgsql b

Re: [HACKERS] plpgsql by default

2006-04-12 Thread Peter Eisentraut
Am Dienstag, 11. April 2006 23:20 schrieb Tom Lane: > In the end it's only one small component of security, but any security > expert will tell you that you take all the layers of security that you > can get. I think what the security experts are saying is that you need a thorough evaluation of a

Re: [HACKERS] RH9 postgresql 8.0.7 rpm

2006-04-12 Thread Devrim GUNDUZ
Hi Gaetano, On Tue, 2006-04-11 at 18:31 +0200, Gaetano Mendola wrote: > I'm trying to build the rpms for RH9, > I downloaded the srpm for RH9 but I'm stuck on these errors: > > Attempt a: > > # rpmbuild --rebuild postgresql-8.0.7-1PGDG.src.rpm > Installing postgresql-8.0.7-1PGDG.src.rpm > error:

Re: [HACKERS] [PATCHES] schema-qualified SET CONSTRAINTS

2006-04-12 Thread Zeugswetter Andreas DCP SD
> >> The attached patch allows SET CONSTRAINTS to take a schema qualified > >> constraint name (myschema.t1_fk_t2) and when given a bare constraint name > >> it uses the search_path to determine the matching constraint instead of > >> the previous behavior of disabling all identically named constr

Re: [HACKERS] Get explain output of postgresql in Tables

2006-04-12 Thread Richard Huxton
Jim C. Nasby wrote: On Mon, Apr 10, 2006 at 10:44:15AM +0100, Richard Huxton wrote: Bruce Momjian wrote: * Allow EXPLAIN output to be more easily processed by scripts Can I request an extension/additional point? * Design EXPLAIN output to survive cut & paste on mailing-lists Being ab