Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Server uses wrong authentication method [CORE1879] #2310

Closed
firebird-automations opened this issue May 4, 2008 · 8 comments
Closed

Server uses wrong authentication method [CORE1879] #2310

firebird-automations opened this issue May 4, 2008 · 8 comments

Comments

@firebird-automations
Copy link
Collaborator

Submitted by: @AlexPeshkoff

Commits: 7ff8e4d

@firebird-automations
Copy link
Collaborator Author

Commented by: @AlexPeshkoff

There are 2 cases, where previously #⁠ifdefs worked:
1. No username/password in DPB, and environment is analyzed for ISC_USER/ISC_PASSWORD.
2. No username/password in DPB in services - on posix OS authentication is used, therefore making (for example) restored database owned by SYSDBA if server is started with root run-user.

Currently we may solve some of the issues with #⁠ifdef, but since 3.0 with OSRI architecture - it's impossible. To make code know exactly is it invoked embedded or in network server, the simplest way is to analyze isinfromation about network address, from which connection is made, present in DPB. But to make it work with services, we also need to pass it to servcies from service manager. It's also useful if one wants to track for remote IP in (imaginable) trigger in RDB$USERS table, which should store IP from which record was last changed.

@firebird-automations
Copy link
Collaborator Author

Modified by: @AlexPeshkoff

assignee: Alexander Peshkov [ alexpeshkoff ]

@firebird-automations
Copy link
Collaborator Author

Modified by: @AlexPeshkoff

status: Open [ 1 ] => Resolved [ 5 ]

resolution: Fixed [ 1 ]

Fix Version: 2.5 Alpha 1 [ 10224 ]

@firebird-automations
Copy link
Collaborator Author

Commented by: @dyemanov

I don't see the bug description mentioning either the "wrong" auth mode or the "expected" one. So, what was the problem you attempted to fix? :-)

@firebird-automations
Copy link
Collaborator Author

Commented by: @AlexPeshkoff

1. It's wrong that server accepts environment variables for any remote connection without isc_dpb_user/password tags.
2. It's wrong that (in posix only) server uses OS auth for connection(s) without isc_dpb_user/password tags.

@firebird-automations
Copy link
Collaborator Author

Modified by: @pcisar

status: Resolved [ 5 ] => Closed [ 6 ]

@firebird-automations
Copy link
Collaborator Author

Modified by: @pavel-zotov

QA Status: No test

@firebird-automations
Copy link
Collaborator Author

Modified by: @pavel-zotov

status: Closed [ 6 ] => Closed [ 6 ]

QA Status: No test => Cannot be tested

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants