postgresql/src/backend/libpq
Bruce Momjian 04c1f72920 PAM authentication:
> pam_strerror() should be used a few more times, rather than just saying
> "Error!".  Also, the configure.in snippet seems wrong.  You add
> -I$pam_prefix/include/security to $INCLUDES and then you #include
> <security/pam_appl.h>.  This whole thing is probably unnecessary, since
> PAM is a system library on the systems where it exists, so the headers
> and libraries are found automatically, unlike OpenSSL and
> Kerberos.

See attached revised patch. (I'm sure the configure.in stuff can be done
right/better, I'm just not enough of a autoconf guru to know what to
change it to.)

Dominic J. Eidson
2001-09-06 03:23:38 +00:00
..
auth.c PAM authentication: 2001-09-06 03:23:38 +00:00
be-fsstubs.c Allow a non-superuser database owner to vacuum all tables in his 2001-06-13 21:44:41 +00:00
crypt.c Reorder MD5/crypt so MD5 comes first in the code. 2001-08-17 15:40:07 +00:00
hba.c PAM authentication: 2001-09-06 03:23:38 +00:00
Makefile Use MD5 for wire protocol encryption for >= 7.2 client/server. 2001-08-15 18:42:16 +00:00
md5.c Add intended Array.java file that accidentally was patched into the 2001-08-25 01:35:45 +00:00
password.c A little more code reorg for MD5/crypt. 2001-08-17 15:44:17 +00:00
pg_hba.conf.sample PAM authentication: 2001-09-06 03:23:38 +00:00
pg_ident.conf.sample Add mention of SIGHUP for pg_ident.conf. 2001-08-01 00:52:19 +00:00
pqcomm.c Fix thinko (revealed by gcc warning). 2001-08-07 15:55:16 +00:00
pqformat.c Remove error report from pq_endmessage when pq_putmessage fails. The 2001-04-16 01:46:57 +00:00
pqpacket.c pgindent run. Make it all clean. 2001-03-22 04:01:46 +00:00
pqsignal.c Rename config.h to pg_config.h and os.h to pg_config_os.h, fix a number of 2001-08-24 14:07:50 +00:00
README.SSL
util.c Change Copyright from PostgreSQL, Inc to PostgreSQL Global Development Group. 2001-01-24 19:43:33 +00:00

>From the servers perspective:


  Receives StartupPacket
           |
           |
 (Is SSL_NEGOTIATE_CODE?) -----------  Normal startup
           |                  No
           |
           | Yes
           |
           |
 (Server compiled with USE_SSL?) ------- Send 'N'
           |                       No        |
           |                                 |
           | Yes                         Normal startup
           |
           |
        Send 'S'
           |
           |
      Establish SSL
           |
           |
      Normal startup
     




>From the clients perspective (v6.6 client _with_ SSL):


      Connect
         |
         |
  Send packet with SSL_NEGOTIATE_CODE
         |
         |
  Receive single char  ------- 'S' -------- Establish SSL
         |                                       |
         | '<else>'                              |
         |                                  Normal startup
         |
         |
   Is it 'E' for error  ------------------- Retry connection
         |                  Yes             without SSL
         | No
         |
   Is it 'N' for normal ------------------- Normal startup
         |                  Yes
         |
   Fail with unknown