postgres.git / summary / log / commit / refs
commit 85f95739ec0c2d9c6afb10d9a0b42732191fbbde
Author: Noah Misch <noah@leadboat.com>
Date: Fri Jul 18 20:05:17 2014 +0000
First released in: 9.5.0, 9.0.18, 9.1.14, 9.2.9, 9.3.5, 9.4.0
Limit pg_upgrade authentication advice to always-secure techniques.
~/.pgpass is a sound choice everywhere, and "peer" authentication is
safe on every platform it supports. Cease to recommend "trust"
authentication, the safety of which is deeply configuration-specific.
Back-patch to 9.0, where pg_upgrade was introduced.
doc/src/sgml/pgupgrade.sgml | 14 ++++++--------
1 file changed, 6 insertions(+), 8 deletions(-)
diff --git a/doc/src/sgml/pgupgrade.sgml b/doc/src/sgml/pgupgrade.sgml
index afb2ff4fbb9..b5267b69d82 100644
--- a/doc/src/sgml/pgupgrade.sgml
+++ b/doc/src/sgml/pgupgrade.sgml
@@ -288,10 +288,9 @@ make prefix=/usr/local/pgsql.new install
<title>Adjust authentication</title>
<para>
- <command>pg_upgrade</> will connect to the old and new servers several times,
- so you might want to set authentication to <literal>trust</>
- or <literal>peer</> in <filename>pg_hba.conf</>, or if using
- <literal>md5</> authentication, use a <filename>~/.pgpass</> file
+ <command>pg_upgrade</> will connect to the old and new servers several
+ times, so you might want to set authentication to <literal>peer</>
+ in <filename>pg_hba.conf</> or use a <filename>~/.pgpass</> file
(see <xref linkend="libpq-pgpass">).
</para>
</step>
@@ -406,10 +405,9 @@ pg_upgrade.exe
<title>Restore <filename>pg_hba.conf</></title>
<para>
- If you modified <filename>pg_hba.conf</> to use <literal>trust</>,
- restore its original authentication settings. It might also be
- necessary to adjust other configurations files in the new cluster to
- match the old cluster, e.g. <filename>postgresql.conf</>.
+ If you modified <filename>pg_hba.conf</>, restore its original settings.
+ It might also be necessary to adjust other configuration files in the new
+ cluster to match the old cluster, e.g. <filename>postgresql.conf</>.
</para>
</step>
[parent: 1567e659a877]