Re: Bad error message on valuntil

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: "Joshua D(dot) Drake" <jd(at)commandprompt(dot)com>
Cc: pgsql-hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Bad error message on valuntil
Date: 2013-06-07 18:57:16
Message-ID: 27216.1370631436@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

"Joshua D. Drake" <jd(at)commandprompt(dot)com> writes:
> I had a customer pulling their hair out today because they couldn't
> login to their system. The error was consistently:

> 2013-06-07 08:42:44 MST postgres 10.1.11.67 27440 FATAL: password
> authentication failed for user "user

> However the problem had nothing to do with password authentication. It
> was because the valuntil on the user had been set till a date in the
> past. Now technically if we just removed the word "password" from the
> error it would be accurate but it seems it would be better to say,
> "FATAL: the user "user" has expired".

I think it's intentional that we don't tell the *client* that level of
detail. I could see emitting a log message about it, but it's not clear
whether that will help an unsophisticated user.

regards, tom lane

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Robert Haas 2013-06-07 19:04:57 Re: Parallell Optimizer
Previous Message Heikki Linnakangas 2013-06-07 18:56:27 Re: Freezing without write I/O