Re: [HACKERS] Bad error message on valuntil

2013-06-19 Thread Joshua D. Drake
On 06/19/2013 08:24 AM, Peter Eisentraut wrote: I think it's intentional that we don't tell the *client* that level of detail. I could see emitting a log message about it, but it's not clear whether that will help an unsophisticated user. Usually, when I log in somewhere and the password is

Re: [HACKERS] Bad error message on valuntil

2013-06-19 Thread Peter Eisentraut
On 6/7/13 2:57 PM, Tom Lane wrote: > "Joshua D. Drake" writes: >> I had a customer pulling their hair out today because they couldn't >> login to their system. The error was consistently: > >> 2013-06-07 08:42:44 MST postgres 10.1.11.67 27440 FATAL: password >> authentication failed for user "u

Re: [HACKERS] Bad error message on valuntil

2013-06-10 Thread Christian Ullrich
* Tom Lane wrote: it supposes that rolvaliduntil represents an expiration date for the user, but really it's only an expiration date for the password.) Does anyone think the docs for CREATE ROLE/VALID UNTIL should mention this more clearly? Currently, it is described as The VALID UN

Re: [HACKERS] Bad error message on valuntil

2013-06-08 Thread Craig Ringer
On 06/08/2013 04:07 AM, Joshua D. Drake wrote: > > FATAL: Authentication failed: Check server log for specifics > > And then we make sure we log proper info? "FATAL: Authentication using method 'password' failed, possible reasons are no/wrong password sent, account expired; see server log for detai

Re: [HACKERS] Bad error message on valuntil

2013-06-08 Thread Joshua D. Drake
On 06/07/2013 12:31 PM, Tom Lane wrote: "Joshua D. Drake" writes: On 06/07/2013 11:57 AM, Tom Lane wrote: I think it's intentional that we don't tell the *client* that level of detail. Why? That seems rather silly. The general policy on authentication failure reports is that we don't tel

Re: [HACKERS] Bad error message on valuntil

2013-06-07 Thread Joshua D. Drake
On 06/07/2013 01:41 PM, David Johnston wrote: "Please check server log for specifics" is not a good message for something sent to a client that in many normal situation would have no access to said logs. I don't agree. The user doesn't need access to the logs. If they get that error they

Re: [HACKERS] Bad error message on valuntil

2013-06-07 Thread David Johnston
Joshua D. Drake wrote > On 06/07/2013 12:31 PM, Tom Lane wrote: >> "Joshua D. Drake" < > jd@ > > writes: >>> On 06/07/2013 11:57 AM, Tom Lane wrote: I think it's intentional that we don't tell the *client* that level of detail. >> >>> Why? That seems rather silly. >> >> The general poli

Re: [HACKERS] Bad error message on valuntil

2013-06-07 Thread Rodrigo Gonzalez
On Fri, 07 Jun 2013 13:07:21 -0700 "Joshua D. Drake" wrote: > > On 06/07/2013 12:31 PM, Tom Lane wrote: > > "Joshua D. Drake" writes: > >> On 06/07/2013 11:57 AM, Tom Lane wrote: > >>> I think it's intentional that we don't tell the *client* that > >>> level of detail. > > > >> Why? That seems

Re: [HACKERS] Bad error message on valuntil

2013-06-07 Thread Joshua D. Drake
On 06/07/2013 12:31 PM, Tom Lane wrote: "Joshua D. Drake" writes: On 06/07/2013 11:57 AM, Tom Lane wrote: I think it's intentional that we don't tell the *client* that level of detail. Why? That seems rather silly. The general policy on authentication failure reports is that we don't tel

Re: [HACKERS] Bad error message on valuntil

2013-06-07 Thread Tom Lane
David Johnston writes: > I presume that "password" in this context refers to the method by which > identity is checked; some alternatives being "trust" and "ident"? Right. > Using the same logic of why you would not expose the fact that the user is > expired versus the user has provided invalid

Re: [HACKERS] Bad error message on valuntil

2013-06-07 Thread Tom Lane
"Joshua D. Drake" writes: > On 06/07/2013 11:57 AM, Tom Lane wrote: >> I think it's intentional that we don't tell the *client* that level of >> detail. > Why? That seems rather silly. The general policy on authentication failure reports is that we don't tell the client anything it doesn't know

Re: [HACKERS] Bad error message on valuntil

2013-06-07 Thread David Johnston
Tom Lane-2 wrote > "Joshua D. Drake" < > jd@ > > writes: >> I had a customer pulling their hair out today because they couldn't >> login to their system. The error was consistently: > >> 2013-06-07 08:42:44 MST postgres 10.1.11.67 27440 FATAL: password >> authentication failed for user "user >

Re: [HACKERS] Bad error message on valuntil

2013-06-07 Thread Joshua D. Drake
On 06/07/2013 11:57 AM, Tom Lane wrote: "Joshua D. Drake" writes: I had a customer pulling their hair out today because they couldn't login to their system. The error was consistently: 2013-06-07 08:42:44 MST postgres 10.1.11.67 27440 FATAL: password authentication failed for user "user

Re: [HACKERS] Bad error message on valuntil

2013-06-07 Thread Tom Lane
"Joshua D. Drake" writes: > I had a customer pulling their hair out today because they couldn't > login to their system. The error was consistently: > 2013-06-07 08:42:44 MST postgres 10.1.11.67 27440 FATAL: password > authentication failed for user "user > However the problem had nothing to d

[HACKERS] Bad error message on valuntil

2013-06-07 Thread Joshua D. Drake
Hello, I had a customer pulling their hair out today because they couldn't login to their system. The error was consistently: 2013-06-07 08:42:44 MST postgres 10.1.11.67 27440 FATAL: password authentication failed for user "user However the problem had nothing to do with password authentica