[pgpool-general: 8606] Re: pcp commands not detecting .pcppass file

Tatsuo Ishii ishii at sraoss.co.jp
Thu Feb 16 15:15:55 JST 2023


> Out of curiosity, why do pcp_* require -w with .pcppass, while
> Postgresql utilities do not require -w with .pgpass?

Don't know. It was implemented that way by this commit:

-----------------------------------------------------------------------------------
commit accb2b28ca2fb19b4dda9c0ab6b0dc6e995730cd
Author: Muhammad Usama <m.usama at gmail.com>
Date:   Fri Mar 6 15:28:25 2015 +0500

    Next in the series of overhauling the PCP library and utilities.
    
    This list of some more prominent changes is as follows.
    
    -- As currently pgpool-II has 12 PCP client utilities and almost 90% of the code
    for these utilities was common, So this commit creates a single source file for
    all the utilities, to make managing and maintenance of the utilities little easier.
    New source file "src/tools/pcp/pcp_frontend_client.c" added by this commit is
    now used for creating all PCP utilities.
    
    -- Syntax is changed for all PCP utilities and PCP utilities now accepts long-options.
    Also, almost all arguments to the utilities are assigned a default value which
    is used if the particular argument is not supplied by the user.
    
    -- The commit also solves the security issue existed in all PCP utilities,
    which was due to the fact that all PCP commands accepts the password as an
    argument which has a potential of being captured by 'ps' command.
    Now PCP applications do not take password in an argument and it can be either
    supplied by password prompt or utilities can read the password
    from ". pcppass" file, which should be located in User's home directory
    or can be specified by  PCPPASSFILE environment variable,
    The password file format is "hostname:port:username:password"
-----------------------------------------------------------------------------------

Maybe because pcp_* without -w nor -W implies -W?

Best reagards,
--
Tatsuo Ishii
SRA OSS LLC
English: http://www.sraoss.co.jp/index_en/
Japanese:http://www.sraoss.co.jp


More information about the pgpool-general mailing list