postgresql

mirror of https://git.postgresql.org/git/postgresql.git synced 2024-09-08 17:39:21 +02:00

History

Michael Paquier efb6f4a4f9 Support the same patterns for pg-user in pg_ident.conf as in pg_hba.conf While pg_hba.conf has support for non-literal username matches, and this commit extends the capabilities that are supported for the PostgreSQL user listed in an ident entry part of pg_ident.conf, with support for: 1. The "all" keyword, where all the requested users are allowed. 2. Membership checks using the + prefix. 3. Using a regex to match against multiple roles. 1. is a feature that has been requested by Jelte Fennema, 2. something that has been mentioned independently by Andrew Dunstan, and 3. is something I came up with while discussing how to extend the first one, whose implementation is facilitated by `8fea868`. This allows matching certain system users against many different postgres users with a single line in pg_ident.conf. Without this, one would need one line for each of the postgres users that a system user can log in as, which can be cumbersome to maintain. Tests are added to the TAP test of peer authentication to provide coverage for all that. Note that this introduces a set of backward-incompatible changes to be able to detect the new patterns, for the following cases: - A role named "all". - A role prefixed with '+' characters, which is something that would not have worked in HBA entries anyway. - A role prefixed by a slash character, similarly to `8fea868`. Any of these can be still be handled by using quotes in the Postgres role defined in an ident entry. A huge advantage of this change is that the code applies the same checks for the Postgres roles in HBA and ident entries, via the common routine check_role(). This compatibility change should be mentioned in the release notes. Author: Jelte Fennema Discussion: https://postgr.es/m/DBBPR83MB0507FEC2E8965012990A80D0F7FC9@DBBPR83MB0507.EURPRD83.prod.outlook.com		2023-01-20 11:21:55 +09:00
..
authentication	Support the same patterns for pg-user in pg_ident.conf as in pg_hba.conf	2023-01-20 11:21:55 +09:00
examples	Update copyright for 2023	2023-01-02 15:00:37 -05:00
icu	Update copyright for 2023	2023-01-02 15:00:37 -05:00
isolation	Fix MAINTAIN privileges for toast tables and partitions.	2023-01-14 00:16:23 -08:00
kerberos	Update copyright for 2023	2023-01-02 15:00:37 -05:00
ldap	Update copyright for 2023	2023-01-02 15:00:37 -05:00
locale	Update copyright for 2023	2023-01-02 15:00:37 -05:00
mb
modules	meson: Add two missing regress tests	2023-01-17 13:49:09 -08:00
perl	Fix AdjustUpgrade.pm's view conversion list for --with-lz4.	2023-01-18 16:51:40 -05:00
recovery	Update copyright for 2023	2023-01-02 15:00:37 -05:00
regress	Fix ts_headline() to handle ORs and phrase queries more honestly.	2023-01-19 16:21:44 -05:00
ssl	Fix typos in comments, code and documentation	2023-01-03 16:26:14 +09:00
subscription	Make new GENERATED-expressions code more bulletproof.	2023-01-15 13:14:52 -05:00
Makefile	Refactor PG_TEST_EXTRA logic in autoconf build	2022-09-20 11:24:16 -07:00
meson.build	Update copyright for 2023	2023-01-02 15:00:37 -05:00
README

README

PostgreSQL tests
================

This directory contains a variety of test infrastructure as well as some of the
tests in PostgreSQL. Not all tests are here -- in particular, there are more in
individual contrib/ modules and in src/bin.

Not all these tests get run by "make check". Check src/test/Makefile to see
which tests get run automatically.

authentication/
  Tests for authentication (but see also below)

examples/
  Demonstration programs for libpq that double as regression tests via
  "make check"

isolation/
  Tests for concurrent behavior at the SQL level

kerberos/
  Tests for Kerberos/GSSAPI authentication and encryption

ldap/
  Tests for LDAP-based authentication

locale/
  Sanity checks for locale data, encodings, etc

mb/
  Tests for multibyte encoding (UTF-8) support

modules/
  Extensions used only or mainly for test purposes, generally not suitable
  for installing in production databases

perl/
  Infrastructure for Perl-based TAP tests

recovery/
  Test suite for recovery and replication

regress/
  PostgreSQL's main regression test suite, pg_regress

ssl/
  Tests to exercise and verify SSL certificate handling

subscription/
  Tests for logical replication