[JBoss JIRA] (TEIID-3177) Enforce SSL connections over ODBC when Encryption Mode is enabled
by Steven Hawkins (JIRA)
[ https://issues.jboss.org/browse/TEIID-3177?page=com.atlassian.jira.plugin... ]
Steven Hawkins edited comment on TEIID-3177 at 10/22/14 9:49 AM:
-----------------------------------------------------------------
Note that this is the default behavior of a pg server as well (with the distinction that other auth types such as a hash would be supported). You have to additionally configure the hba conf to deny non-ssl client connections - which is what this feature will be analogous to. Also note that http://www.postgresql.org/docs/9.2/static/libpq-ssl.html states that clients must be configured for ssl - see sslmode or else the client can still send information in an non-secure fashion even if the server is in ssl mode regardless of whether it is rejecting connections (this may be because there are versions of the pg client that can send password information in the initialization message or not waiting for the authentication mode response from the server).
was (Author: shawkins):
Note that this is the default behavior of a pg server as well. You have to additionally configure the hba conf to deny non-ssl client connections - which is what this feature will be analogous to. Also note that http://www.postgresql.org/docs/9.2/static/libpq-ssl.html states that clients must be configured for ssl - see sslmode or else the client can still send information in an non-secure fashion even if the server is in ssl mode regardless of whether it is rejecting connections (this may be because there are versions of the pg client that can send password information in the initialization message or not waiting for the authentication mode response from the server).
> Enforce SSL connections over ODBC when Encryption Mode is enabled
> -----------------------------------------------------------------
>
> Key: TEIID-3177
> URL: https://issues.jboss.org/browse/TEIID-3177
> Project: Teiid
> Issue Type: Feature Request
> Components: ODBC
> Affects Versions: 8.8
> Reporter: Cristiano Nicolai
> Assignee: Steven Hawkins
> Priority: Critical
> Fix For: 8.9
>
>
> When connecting via ODBC transport, even if the encryption mode is set to enabled is still possible to establish non ssl connections. This allows clients to connect via insecure method. We would like that the Teiid transport could reject connections if they are not properly set up using SSL transport.
--
This message was sent by Atlassian JIRA
(v6.3.1#6329)
10 years
[JBoss JIRA] (TEIID-3183) Join sort order altered inappropriately
by Steven Hawkins (JIRA)
[ https://issues.jboss.org/browse/TEIID-3183?page=com.atlassian.jira.plugin... ]
Steven Hawkins resolved TEIID-3183.
-----------------------------------
Resolution: Done
Updated the logic to check to see if a sort order is already defined.
A potential enhancement moving forward would be to check the parent join and see if an enhanced sort could be used. This would require forcing using the subquery as the sorted index and updating the join logic to understand semi join and anti-semi join. This would allow the sort order to be persevered.
> Join sort order altered inappropriately
> ---------------------------------------
>
> Key: TEIID-3183
> URL: https://issues.jboss.org/browse/TEIID-3183
> Project: Teiid
> Issue Type: Bug
> Components: Query Engine
> Affects Versions: 8.4
> Reporter: Steven Hawkins
> Assignee: Steven Hawkins
> Priority: Critical
> Fix For: 8.7.1, 8.9
>
>
> If a merge or other join configuration is chosen and there is a subquery affecting only a side of the join that is to be sorted such that the subquery can be rewritten as a semi/anti-semi join, then the subquery rewrite will alter the intended sort order of the original join. This can result in incorrect results.
> An example query:
> select pm2.g2.e1 from pm1.g1 inner join pm2.g2 on (pm1.g1.e1 = pm2.g2.e1) where pm2.g2.e2 in /*+ mj */ (select count(e2) FROM pm1.g2 group by e1 having e1 < pm2.g2.e3)
--
This message was sent by Atlassian JIRA
(v6.3.1#6329)
10 years
[JBoss JIRA] (TEIID-3183) Join sort order altered inappropriately
by RH Bugzilla Integration (JIRA)
[ https://issues.jboss.org/browse/TEIID-3183?page=com.atlassian.jira.plugin... ]
RH Bugzilla Integration updated TEIID-3183:
-------------------------------------------
Bugzilla Update: Perform
Bugzilla References: https://bugzilla.redhat.com/show_bug.cgi?id=1155599
> Join sort order altered inappropriately
> ---------------------------------------
>
> Key: TEIID-3183
> URL: https://issues.jboss.org/browse/TEIID-3183
> Project: Teiid
> Issue Type: Bug
> Components: Query Engine
> Affects Versions: 8.4
> Reporter: Steven Hawkins
> Assignee: Steven Hawkins
> Priority: Critical
> Fix For: 8.7.1, 8.9
>
>
> If a merge or other join configuration is chosen and there is a subquery affecting only a side of the join that is to be sorted such that the subquery can be rewritten as a semi/anti-semi join, then the subquery rewrite will alter the intended sort order of the original join. This can result in incorrect results.
> An example query:
> select pm2.g2.e1 from pm1.g1 inner join pm2.g2 on (pm1.g1.e1 = pm2.g2.e1) where pm2.g2.e2 in /*+ mj */ (select count(e2) FROM pm1.g2 group by e1 having e1 < pm2.g2.e3)
--
This message was sent by Atlassian JIRA
(v6.3.1#6329)
10 years
[JBoss JIRA] (TEIID-3183) Join sort order altered inappropriately
by Steven Hawkins (JIRA)
Steven Hawkins created TEIID-3183:
-------------------------------------
Summary: Join sort order altered inappropriately
Key: TEIID-3183
URL: https://issues.jboss.org/browse/TEIID-3183
Project: Teiid
Issue Type: Bug
Components: Query Engine
Affects Versions: 8.4
Reporter: Steven Hawkins
Assignee: Steven Hawkins
Priority: Critical
Fix For: 8.7.1, 8.9
If a merge or other join configuration is chosen and there is a subquery affecting only a side of the join that is to be sorted such that the subquery can be rewritten as a semi/anti-semi join, then the subquery rewrite will alter the intended sort order of the original join. This can result in incorrect results.
An example query:
select pm2.g2.e1 from pm1.g1 inner join pm2.g2 on (pm1.g1.e1 = pm2.g2.e1) where pm2.g2.e2 in /*+ mj */ (select count(e2) FROM pm1.g2 group by e1 having e1 < pm2.g2.e3)
--
This message was sent by Atlassian JIRA
(v6.3.1#6329)
10 years