Re: [HACKERS] Windows installer and dlls

2006-12-30 Thread Dave Page
Magnus Hagander wrote: Knut P. Lehre wrote: Installing postgresql 8.2.0 on Windows XP Pro SP2 using the msi installer dated 2006-12-04, with libeay32.dll and ssleay32.dll (both dated 2005-07-06) (and libiconv-2.dll, libintl-2.dll, and libpq.dll) from a previous installation (of version 8.0.5)

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Martijn van Oosterhout
On Sat, Dec 30, 2006 at 02:10:42AM -0500, Tom Lane wrote: Bruce Momjian [EMAIL PROTECTED] writes: Keep in mind it took years to get OpenSSL support up to the level we have it now. It took SSL experts coming in and out of our development process to get it 100% feature-complete. Actually,

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Stephen Frost
* Bruce Momjian ([EMAIL PROTECTED]) wrote: Robert Treat wrote: given options like --enable-dtrace and --with-libedit-preferred, I don't find this argument compelling... Keep in mind it took years to get OpenSSL support up to the level we have it now. It took SSL experts coming in and

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Stephen Frost
* Andrew Dunstan ([EMAIL PROTECTED]) wrote: Bruce Momjian wrote: Keep in mind it took years to get OpenSSL support up to the level we have it now. It took SSL experts coming in and out of our development process to get it 100% feature-complete. Doing this for another library, I am

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Stephen Frost
* Tom Lane ([EMAIL PROTECTED]) wrote: Bruce Momjian [EMAIL PROTECTED] writes: Keep in mind it took years to get OpenSSL support up to the level we have it now. It took SSL experts coming in and out of our development process to get it 100% feature-complete. Actually, it's *not*

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Stephen Frost
* Martijn van Oosterhout (kleptog@svana.org) wrote: On Sat, Dec 30, 2006 at 02:10:42AM -0500, Tom Lane wrote: Actually, it's *not* feature-complete even yet. What's missing? I don't see anything on the TODO list relating to this. If you wanted a GnuTLS patch that supported more features

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread David Fetter
On Fri, Dec 29, 2006 at 08:12:47PM -0500, Stephen Frost wrote: * Joshua D. Drake ([EMAIL PROTECTED]) wrote: We use it on some of our production systems (since it can provide cracklib, password expiration, etc, and the postgres instance inside it's own vserver so it doesn't hurt as much

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Magnus Hagander
Stephen Frost wrote: * Martijn van Oosterhout (kleptog@svana.org) wrote: On Sat, Dec 30, 2006 at 02:10:42AM -0500, Tom Lane wrote: Actually, it's *not* feature-complete even yet. What's missing? I don't see anything on the TODO list relating to this. If you wanted a GnuTLS patch that

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Magnus Hagander
Kerberos is there and it's not too hard to use (though does depend on the MIT Kerberos for Windows service currently). Supporting SSPI/GSSAPI and then writing a small document on how to generate Windows keytabs for Postgres would mean single-sign-on for Windows users using applications which

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Joshua D. Drake
This would be the big feature I think is missing from our current SSL support. I don't think it'd be terribly difficult to support with either library (I think most of the work would be on the PG user auth side, which would be useable by either). Wouldn't it be a lot more logical to

Re: [HACKERS] WITH support

2006-12-30 Thread Mark Cave-Ayland
On Sat, 2006-12-30 at 00:49 -0500, Jonah H. Harris wrote: On 12/29/06, Bruce Momjian [EMAIL PROTECTED] wrote: No code yet, and I don't remember who said they were working on it. I'm still waiting to hear from Mark Cave-Ayland on whether he's going to pick it up or whether I'll just do it.

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Martijn van Oosterhout
On Sat, Dec 30, 2006 at 08:14:16AM -0800, Joshua D. Drake wrote: This would be the big feature I think is missing from our current SSL support. I don't think it'd be terribly difficult to support with either library (I think most of the work would be on the PG user auth side, which

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread mark
On Sat, Dec 30, 2006 at 06:05:14PM +0100, Martijn van Oosterhout wrote: Except tht X.509 is already done (in a sense). The client can supply a certificate that the server can check, and vice-versa. You can't link this with the postgresql username yet, but I havn't seen any proposals about how

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Joshua D. Drake
The reason I wanted to use PGP is that I already have a PGP key. X.509 certificates are far too complicated (a certificate authority is a useless extra step in my case). Complete side note but one feature that I brought up to my team a potentially useful would be to allow the use of ssh keys

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Bruce Momjian
Stephen Frost wrote: -- Start of PGP signed section. * Bruce Momjian ([EMAIL PROTECTED]) wrote: Robert Treat wrote: given options like --enable-dtrace and --with-libedit-preferred, I don't find this argument compelling... Keep in mind it took years to get OpenSSL support up to

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Bruce Momjian
Stephen Frost wrote: Yet *having* that requirement on a *derived work* which includes GPL code is *against* the terms of the GPL. That's *exactly* the issue. The GPL says more than you must provide the source code to everything, it explicitly includes a requirement that no additional

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Magnus Hagander
[EMAIL PROTECTED] wrote: On Sat, Dec 30, 2006 at 06:05:14PM +0100, Martijn van Oosterhout wrote: Except tht X.509 is already done (in a sense). The client can supply a certificate that the server can check, and vice-versa. You can't link this with the postgresql username yet, but I havn't seen

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Bruce Momjian
If you want real language-lawyer over-reach, check out this 2003 posting that says our BSD license wording is not compatible with the OpenBSD BSD license: http://archives.postgresql.org/pgsql-bugs/2003-11/msg00212.php OpenBSD feels the without fee can be misinterpreted, so PostgreSQL

Re: [HACKERS] Logging temp file useage ... a little advice

2006-12-30 Thread Bruce Momjian
Perhaps the file is not open at the time you are doing the fstat(). Also, context diffs (diff -c) are clearer for us. --- Bill Moran wrote: So I've got this patch (attached, against 8.2) The goal is to track temp

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Joshua D. Drake
On Sat, 2006-12-30 at 13:44 -0500, Bruce Momjian wrote: If you want real language-lawyer over-reach, check out this 2003 posting that says our BSD license wording is not compatible with the OpenBSD BSD license: http://archives.postgresql.org/pgsql-bugs/2003-11/msg00212.php OpenBSD

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Stephen Frost
* Bruce Momjian ([EMAIL PROTECTED]) wrote: Stephen Frost wrote: Yet *having* that requirement on a *derived work* which includes GPL code is *against* the terms of the GPL. That's *exactly* the issue. The GPL says more than you must provide the source code to everything, it explicitly

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Stephen Frost
* Magnus Hagander ([EMAIL PROTECTED]) wrote: Kerberos is there and it's not too hard to use (though does depend on the MIT Kerberos for Windows service currently). Supporting SSPI/GSSAPI and then writing a small document on how to generate Windows keytabs for Postgres would mean

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Bruce Momjian
Stephen Frost wrote: -- Start of PGP signed section. * Bruce Momjian ([EMAIL PROTECTED]) wrote: Stephen Frost wrote: Yet *having* that requirement on a *derived work* which includes GPL code is *against* the terms of the GPL. That's *exactly* the issue. The GPL says more than you must

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Stephen Frost
* Magnus Hagander ([EMAIL PROTECTED]) wrote: Stephen Frost wrote: * Martijn van Oosterhout (kleptog@svana.org) wrote: On Sat, Dec 30, 2006 at 02:10:42AM -0500, Tom Lane wrote: Actually, it's *not* feature-complete even yet. What's missing? I don't see anything on the TODO list relating to

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Stephen Frost
* Magnus Hagander ([EMAIL PROTECTED]) wrote: [EMAIL PROTECTED] wrote: On Sat, Dec 30, 2006 at 06:05:14PM +0100, Martijn van Oosterhout wrote: Except tht X.509 is already done (in a sense). The client can supply a certificate that the server can check, and vice-versa. You can't link this

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Stephen Frost
* Joshua D. Drake ([EMAIL PROTECTED]) wrote: The reason I wanted to use PGP is that I already have a PGP key. X.509 certificates are far too complicated (a certificate authority is a useless extra step in my case). Complete side note but one feature that I brought up to my team a

Re: [HACKERS] Sync Scan update

2006-12-30 Thread Jim C. Nasby
On Tue, Dec 19, 2006 at 10:37:21AM -0800, Jeff Davis wrote: leader is doing a nested loop and the follower which is just doing a straight sequential scan is being held back? The follower will never be held back in my current implementation. My current implementation relies on the

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Stephen Frost
* Bruce Momjian ([EMAIL PROTECTED]) wrote: Stephen Frost wrote: So it's *not* an additional restriction. Not to mention the other reason- the license isn't part of the *work*. It is an _additional_ license you have to include, not just their license. I don't see how requiring an

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Magnus Hagander
Stephen Frost wrote: * Magnus Hagander ([EMAIL PROTECTED]) wrote: Kerberos is there and it's not too hard to use (though does depend on the MIT Kerberos for Windows service currently). Supporting SSPI/GSSAPI and then writing a small document on how to generate Windows keytabs for Postgres

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Joshua D. Drake
On Sat, 2006-12-30 at 14:28 -0500, Stephen Frost wrote: * Joshua D. Drake ([EMAIL PROTECTED]) wrote: The reason I wanted to use PGP is that I already have a PGP key. X.509 certificates are far too complicated (a certificate authority is a useless extra step in my case). Complete

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Stephen Frost
* Bruce Momjian ([EMAIL PROTECTED]) wrote: I had to stuble together a Certificate Revocation List (CRL) patch for 8.2 from soneone's posted patch. I didn't even know what CRL was, and got no feedback from the community, so I had to figure it out myself to get it into CVS (for server and

Re: [HACKERS] Possible documentation error

2006-12-30 Thread Jim C. Nasby
On Tue, Dec 26, 2006 at 07:22:21PM +0100, Martijn van Oosterhout wrote: On Tue, Dec 26, 2006 at 12:49:55PM -0500, D'Arcy J.M. Cain wrote: On Tue, 26 Dec 2006 18:12:45 +0100 Martijn van Oosterhout kleptog@svana.org wrote: On Tue, Dec 26, 2006 at 12:04:40PM -0500, D'Arcy J.M. Cain wrote:

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Bruce Momjian
Stephen Frost wrote: -- Start of PGP signed section. * Bruce Momjian ([EMAIL PROTECTED]) wrote: Stephen Frost wrote: So it's *not* an additional restriction. Not to mention the other reason- the license isn't part of the *work*. It is an _additional_ license you have to include, not

Re: [HACKERS] Possible documentation error

2006-12-30 Thread Bruce Momjian
OK, wording updated. Thanks. --- Jim C. Nasby wrote: On Tue, Dec 26, 2006 at 07:22:21PM +0100, Martijn van Oosterhout wrote: On Tue, Dec 26, 2006 at 12:49:55PM -0500, D'Arcy J.M. Cain wrote: On Tue, 26 Dec 2006

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Stephen Frost
* Bruce Momjian ([EMAIL PROTECTED]) wrote: Stephen Frost wrote: 6. Each time you redistribute the Program (or any work based on the Program), the recipient automatically receives a license from the original licensor to copy, distribute or modify the Program subject to these terms and

Re: [HACKERS] [PATCHES] Bundle of patches

2006-12-30 Thread Tom Lane
Teodor Sigaev [EMAIL PROTECTED] writes: Just a freshing for clean applying.. http://www.sigaev.ru/misc/user_defined_typmod-0.11.gz Applied with some revisions, and pg_dump support and regression tests added. regards, tom lane ---(end of

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Bruce Momjian
Stephen Frost wrote: -- Start of PGP signed section. * Bruce Momjian ([EMAIL PROTECTED]) wrote: Stephen Frost wrote: 6. Each time you redistribute the Program (or any work based on the Program), the recipient automatically receives a license from the original licensor to copy,

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Stephen Frost
* Bruce Momjian ([EMAIL PROTECTED]) wrote: Stephen Frost wrote: 6. Each time you redistribute the Program (or any work based on the Program), the recipient automatically receives a license from the original licensor to copy, distribute or modify the Program subject to these terms

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Bruce Momjian
Stephen Frost wrote: 1. You may copy and distribute verbatim copies of the Program's source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty; keep intact all the

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Martijn van Oosterhout
On Sat, Dec 30, 2006 at 05:03:23PM -0500, Bruce Momjian wrote: I appriciate your pedantism but in the end it really doesn't matter very much. This is, aiui anyway, the way Debian interprets the various licenses. You're welcome to your own interpretation. That was my point --- that it

Re: [HACKERS] effective_cache_size vs units

2006-12-30 Thread Andrew Hammond
Benny Amorsen wrote: TL == Tom Lane [EMAIL PROTECTED] writes: TL Anyone against making it case-insensitive, speak now or hold your TL peace. SI-units are inherently case-sensitive. The obvious example is that now you will allow people to specify an amount in millibytes, while interpreting

Re: [HACKERS] effective_cache_size vs units

2006-12-30 Thread Tom Lane
Andrew Hammond [EMAIL PROTECTED] writes: I agree. But perhaps the solution instead of failing is to throw a warning to the effect of Not to be pedantic, but you said mb and millibits as a unit doesn't make sense in this context. Assuming you meant MB (MegaBits). and then start up. Generally

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Bruce Momjian
Martijn van Oosterhout wrote: -- Start of PGP signed section. On Sat, Dec 30, 2006 at 05:03:23PM -0500, Bruce Momjian wrote: I appriciate your pedantism but in the end it really doesn't matter very much. This is, aiui anyway, the way Debian interprets the various licenses. You're

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread David Boreham
Tom Lane wrote: What basically bothers me about this is that trying to support both the OpenSSL and GNUTLS APIs is going to be an enormous investment of development and maintenance effort, because it's such a nontrivial thing Fascinating thread for the holidays. I found it interesting that

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Stephen Frost
* David Boreham ([EMAIL PROTECTED]) wrote: Fascinating thread for the holidays. I found it interesting that nobody has mentioned NSS (former Netscape SSL library). It has its own bag of problems of course, but for me is potentially more attractive than GNU TLS. e.g. it has FIPS-140

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Stephen Frost
* Bruce Momjian ([EMAIL PROTECTED]) wrote: Martijn van Oosterhout wrote: Somehow I don't think a statement requiring you to put some guys name in all your advertising material is the same as requiring you to preserve the copyright notice. Agreed, but the words additional restrictions

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Stephen Frost
* Bruce Momjian ([EMAIL PROTECTED]) wrote: Stephen Frost wrote: I appriciate your pedantism but in the end it really doesn't matter very much. This is, aiui anyway, the way Debian interprets the various licenses. You're welcome to your own interpretation. That was my point --- that it

Re: [HACKERS] Doc bug

2006-12-30 Thread Gurjeet Singh
Hi Jim, The code has been fixed by Bruce in response to my bug#2851 ( http://archives.postgresql.org/pgsql-bugs/2006-12/msg00191.php). BTW, I don't know how to make sure that the effect of a doc patch looks fine in a browser. I mean, how to view the doc/src/sgml/*.sgml in a browser, nicely

Re: [HACKERS] Doc bug

2006-12-30 Thread Andrew Dunstan
Gurjeet Singh wrote: Hi Jim, The code has been fixed by Bruce in response to my bug#2851 ( http://archives.postgresql.org/pgsql-bugs/2006-12/msg00191.php). BTW, I don't know how to make sure that the effect of a doc patch looks fine in a browser. I mean, how to view the

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread Joshua D. Drake
On Sat, 2006-12-30 at 22:18 -0500, Stephen Frost wrote: * Bruce Momjian ([EMAIL PROTECTED]) wrote: Stephen Frost wrote: I appriciate your pedantism but in the end it really doesn't matter very much. This is, aiui anyway, the way Debian interprets the various licenses. You're welcome

Re: [HACKERS] TODO: GNU TLS

2006-12-30 Thread mark
On Sat, Dec 30, 2006 at 05:03:23PM -0500, Bruce Momjian wrote: Stephen Frost wrote: I appriciate your pedantism but in the end it really doesn't matter very much. This is, aiui anyway, the way Debian interprets the various licenses. You're welcome to your own interpretation. That was my

Re: [HACKERS] Doc bug

2006-12-30 Thread Gurjeet Singh
On 12/31/06, Andrew Dunstan [EMAIL PROTECTED] wrote: Gurjeet Singh wrote: BTW, I don't know how to make sure that the effect of a doc patch looks fine in a browser. I mean, how to view the doc/src/sgml/*.sgml in a browser, nicely formatted as we see on our website! Docs for CVS HEAD

Re: [HACKERS] Recent SIGSEGV failures in buildfarm HEAD

2006-12-30 Thread Tom Lane
Seneca Cunningham [EMAIL PROTECTED] writes: I don't have a core, but here's the CrashReporter output for both of jackal's failed runs: Wow, some actual data, rather than just noodling about how to get it ... thanks! ... 11 postgres 0x0022b2e3 RelationIdGetRelation + 110 (relcache.c:1496)

Re: [HACKERS] Doc bug

2006-12-30 Thread Jeremy Drake
On Sun, 31 Dec 2006, Gurjeet Singh wrote: On 12/31/06, Andrew Dunstan [EMAIL PROTECTED] wrote: Gurjeet Singh wrote: BTW, I don't know how to make sure that the effect of a doc patch looks fine in a browser. I mean, how to view the doc/src/sgml/*.sgml in a browser, nicely

Re: [HACKERS] Doc bug

2006-12-30 Thread Gurjeet Singh
On 12/31/06, Jeremy Drake [EMAIL PROTECTED] wrote: On Sun, 31 Dec 2006, Gurjeet Singh wrote: On 12/31/06, Andrew Dunstan [EMAIL PROTECTED] wrote: Gurjeet Singh wrote: BTW, I don't know how to make sure that the effect of a doc patch looks fine in a browser. I mean, how to view

[HACKERS] A possible TODO item

2006-12-30 Thread Gurjeet Singh
The comment above TOAST_INDEX_HACK in tuptoaster.h is: /* * This enables de-toasting of index entries. Needed until VACUUM is * smart enough to rebuild indexes from scratch. */ #define TOAST_INDEX_HACK Do we already have a TODO item to remove this hack? If not, I think there should be, because