zeek/testing/btest/scripts/base/protocols/postgresql
Fupeng Zhao e4e56789db
Report PostgreSQL login success only after ReadyForQuery
Previously, Zeek treated the receipt of `AuthenticationOk` as a
successful login. However, according to the PostgreSQL
Frontend/Backend Protocol, the startup phase is not complete until
the server sends `ReadyForQuery`. It is still possible for the server
to emit an `ErrorResponse` (e.g. ERRCODE_INVALID_AUTHORIZATION_SPECIFICATION)
after `AuthenticationOk` but before `ReadyForQuery`.

This change updates the PostgreSQL analyzer to defer reporting login
success until `ReadyForQuery` is observed. This prevents false
positives in cases where authentication succeeds but session startup
fails.
2025-08-18 10:59:44 +08:00
..
availability.zeek postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
bad-backend-message.zeek Settle on analyzer.log for the dpd.log replacement 2025-06-03 17:33:36 +01:00
bad-startup-message.zeek postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
dump-events.zeek Btests: don't use -C in Zeek invocations that don't actually need it 2025-06-06 13:46:45 -07:00
http-on-port-5432.zeek Btests: don't use -C in Zeek invocations that don't actually need it 2025-06-06 13:46:45 -07:00
mysql-on-port-5432.zeek Btests: don't use -C in Zeek invocations that don't actually need it 2025-06-06 13:46:45 -07:00
parameter-status.zeek Btests: don't use -C in Zeek invocations that don't actually need it 2025-06-06 13:46:45 -07:00
psql-auth.zeek Btests: don't use -C in Zeek invocations that don't actually need it 2025-06-06 13:46:45 -07:00
psql-aws-ssl-disable-15432.zeek Btests: don't use -C in Zeek invocations that don't actually need it 2025-06-06 13:46:45 -07:00
psql-aws-ssl-disable.zeek Btests: don't use -C in Zeek invocations that don't actually need it 2025-06-06 13:46:45 -07:00
psql-aws-ssl-require-15432.zeek Btests: don't use -C in Zeek invocations that don't actually need it 2025-06-06 13:46:45 -07:00
psql-aws-ssl-require.zeek Btests: don't use -C in Zeek invocations that don't actually need it 2025-06-06 13:46:45 -07:00
psql-create-insert-select.zeek Btests: don't use -C in Zeek invocations that don't actually need it 2025-06-06 13:46:45 -07:00
psql-insert-fail-drop-fail.zeek Btests: don't use -C in Zeek invocations that don't actually need it 2025-06-06 13:46:45 -07:00
psql-login-fail.zeek Btests: don't use -C in Zeek invocations that don't actually need it 2025-06-06 13:46:45 -07:00
psql-login-no-role.zeek Report PostgreSQL login success only after ReadyForQuery 2025-08-18 10:59:44 +08:00
psql-login-no-sslrequest.zeek Btests: don't use -C in Zeek invocations that don't actually need it 2025-06-06 13:46:45 -07:00
psql-select-now.zeek Btests: don't use -C in Zeek invocations that don't actually need it 2025-06-06 13:46:45 -07:00
startup-parameter.zeek Btests: don't use -C in Zeek invocations that don't actually need it 2025-06-06 13:46:45 -07:00