Streaming replication and privilege
Hi,
Currently superuser privilege is required when the standby connects
to the primary. But there is the complaint that we should add new
privilege for replication and use it instead of superuser because
current approach is not good for security (*1). This has been listed
as one of TODO items of SR.
This TODO item really needs to be addressed for 9.0? Frankly I'm not
familiar with that area, so I've not work on it at all yet, but I'm
going to create the patch if many people want it for 9.0. What is
your opinion?
(*1)
http://archives.postgresql.org/pgsql-hackers/2010-01/msg01536.php
Regards,
--
Fujii Masao
NIPPON TELEGRAPH AND TELEPHONE CORPORATION
NTT Open Source Software Center
On Thu, Mar 4, 2010 at 5:47 AM, Fujii Masao <masao.fujii@gmail.com> wrote:
Currently superuser privilege is required when the standby connects
to the primary. But there is the complaint that we should add new
privilege for replication and use it instead of superuser because
current approach is not good for security (*1). This has been listed
as one of TODO items of SR.This TODO item really needs to be addressed for 9.0? Frankly I'm not
familiar with that area, so I've not work on it at all yet, but I'm
going to create the patch if many people want it for 9.0. What is
your opinion?(*1)
http://archives.postgresql.org/pgsql-hackers/2010-01/msg01536.php
In my opinion, it is a 9.1 item.
...Robert
On 3/4/10 2:47 AM, Fujii Masao wrote:
This TODO item really needs to be addressed for 9.0? Frankly I'm not
familiar with that area, so I've not work on it at all yet, but I'm
going to create the patch if many people want it for 9.0. What is
your opinion?
I think it falls under "nice to have, but not essential for 9.0".
--Josh Berkus
On Fri, Mar 5, 2010 at 3:14 AM, Josh Berkus <josh@agliodbs.com> wrote:
On 3/4/10 2:47 AM, Fujii Masao wrote:
This TODO item really needs to be addressed for 9.0? Frankly I'm not
familiar with that area, so I've not work on it at all yet, but I'm
going to create the patch if many people want it for 9.0. What is
your opinion?I think it falls under "nice to have, but not essential for 9.0".
Agreed. I moved it from TODO list for v9.0 to that for future release.
Regards,
--
Fujii Masao
NIPPON TELEGRAPH AND TELEPHONE CORPORATION
NTT Open Source Software Center