Streaming replication and privilege

Started by Fujii Masaoalmost 16 years ago4 messages
#1Fujii Masao
masao.fujii@gmail.com

Hi,

Currently superuser privilege is required when the standby connects
to the primary. But there is the complaint that we should add new
privilege for replication and use it instead of superuser because
current approach is not good for security (*1). This has been listed
as one of TODO items of SR.

This TODO item really needs to be addressed for 9.0? Frankly I'm not
familiar with that area, so I've not work on it at all yet, but I'm
going to create the patch if many people want it for 9.0. What is
your opinion?

(*1)
http://archives.postgresql.org/pgsql-hackers/2010-01/msg01536.php

Regards,

--
Fujii Masao
NIPPON TELEGRAPH AND TELEPHONE CORPORATION
NTT Open Source Software Center

#2Robert Haas
robertmhaas@gmail.com
In reply to: Fujii Masao (#1)
Re: Streaming replication and privilege

On Thu, Mar 4, 2010 at 5:47 AM, Fujii Masao <masao.fujii@gmail.com> wrote:

Currently superuser privilege is required when the standby connects
to the primary. But there is the complaint that we should add new
privilege for replication and use it instead of superuser because
current approach is not good for security (*1). This has been listed
as one of TODO items of SR.

This TODO item really needs to be addressed for 9.0? Frankly I'm not
familiar with that area, so I've not work on it at all yet, but I'm
going to create the patch if many people want it for 9.0. What is
your opinion?

(*1)
http://archives.postgresql.org/pgsql-hackers/2010-01/msg01536.php

In my opinion, it is a 9.1 item.

...Robert

#3Josh Berkus
josh@agliodbs.com
In reply to: Fujii Masao (#1)
Re: Streaming replication and privilege

On 3/4/10 2:47 AM, Fujii Masao wrote:

This TODO item really needs to be addressed for 9.0? Frankly I'm not
familiar with that area, so I've not work on it at all yet, but I'm
going to create the patch if many people want it for 9.0. What is
your opinion?

I think it falls under "nice to have, but not essential for 9.0".

--Josh Berkus

#4Fujii Masao
masao.fujii@gmail.com
In reply to: Josh Berkus (#3)
Re: Streaming replication and privilege

On Fri, Mar 5, 2010 at 3:14 AM, Josh Berkus <josh@agliodbs.com> wrote:

On 3/4/10 2:47 AM, Fujii Masao wrote:

This TODO item really needs to be addressed for 9.0? Frankly I'm not
familiar with that area, so I've not work on it at all yet, but I'm
going to create the patch if many people want it for 9.0. What is
your opinion?

I think it falls under "nice to have, but not essential for 9.0".

Agreed. I moved it from TODO list for v9.0 to that for future release.

Regards,

--
Fujii Masao
NIPPON TELEGRAPH AND TELEPHONE CORPORATION
NTT Open Source Software Center