Received: from malur.postgresql.org ([217.196.149.56])
 by arkaria.postgresql.org with esmtp (Exim 4.80) (envelope-from
 <pgsql-admin-owner+M42140=pgsql+2Dadmin=arkaria.postgresql.org@postgresql.org>)
 id 1WAoIs-0003Bv-GE
 for pgsql-admin@arkaria.postgresql.org; Tue, 04 Feb 2014 22:17:14 +0000
Received: from localhost ([127.0.0.1] helo=postgresql.org)
 by malur.postgresql.org with smtp (Exim 4.80) (envelope-from
 <pgsql-admin-owner+M42140=pgsql+2Dadmin=arkaria.postgresql.org@postgresql.org>)
 id 1WAoIr-00071c-Nc
 for pgsql-admin@arkaria.postgresql.org; Tue, 04 Feb 2014 22:17:13 +0000
Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29])
 by malur.postgresql.org with esmtp (Exim 4.80)
 (envelope-from <cs_dba@consistentstate.com>) id 1WAoIq-00071V-Na
 for pgsql-admin@postgresql.org; Tue, 04 Feb 2014 22:17:12 +0000
Received: from mail-ig0-f175.google.com ([209.85.213.175])
 by magus.postgresql.org with esmtp (Exim 4.80)
 (envelope-from <cs_dba@consistentstate.com>) id 1WAoIn-0000mx-Pr
 for pgsql-admin@postgresql.org; Tue, 04 Feb 2014 22:17:12 +0000
Received: by mail-ig0-f175.google.com with SMTP id uq10so9860668igb.2
 for <pgsql-admin@postgresql.org>; Tue, 04 Feb 2014 14:17:08 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to
 :cc:subject:content-type:content-transfer-encoding;
 bh=vKTxsiiJoheJ3mBX28G6br53RbRuhq+bMZMxiwEfvfI=;
 b=CwRvRcD/GHtn+kRTv7V7r66BXUOLMH2xTGuCuBC6yRWFNNEBvchdA5AMy9smndoxy/
 GYE8rMX/eXajAH5c7LcEq1njkZrBVjU5rOtQmL1fuNkxJI/u+jNFG/C3xz2rKAD1N/Q6
 hok6xReRclW6xNedlQ3qcoY2x5Wf/BmC5sGpIzj3rPO5CHXX4tWi4DYculKG8Lyetj/0
 HNztPC9R2JxuH5esLb3nJovZtUslyJgQMCe5mayQYJCXSZjSc6jvzPjlBA1deEPNbkva
 mTLr5u5DV0vGBbxt6dKztlVAJ3FgLSIQXNMa1pyiVhORcwWjzsUWdAkzd4WCfmmfQBJt
 DBdw==
X-Gm-Message-State: 
 ALoCoQlM7TLOKTRygbc33r3kzadCnlTrnUDK2OViFx/qf7sf62uNC9xjSJVdOGT4M755I0JlaJTk
X-Received: by 10.43.129.130 with SMTP id hi2mr3797172icc.16.1391552228507;
 Tue, 04 Feb 2014 14:17:08 -0800 (PST)
Received: from Kevins-MacBook-Pro.local ([67.148.186.194])
 by mx.google.com with ESMTPSA id h6sm43209918igy.8.2014.02.04.14.17.07
 for <multiple recipients>
 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
 Tue, 04 Feb 2014 14:17:07 -0800 (PST)
Message-ID: <52F166E2.7070507@consistentstate.com>
Date: Tue, 04 Feb 2014 15:17:06 -0700
From: CS DBA <cs_dba@consistentstate.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9;
 rv:24.0) Gecko/20100101 Thunderbird/24.0.1
MIME-Version: 1.0
To: pgsql-admin <pgsql-admin@postgresql.org>
CC: cs_dba@consistentstate.com
Subject: Password Security
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Pg-Spam-Score: -2.6 (--)
List-Archive: <http://archives.postgresql.org/pgsql-admin>
List-Help: <mailto:majordomo@postgresql.org?body=help>
List-ID: <pgsql-admin.postgresql.org>
List-Owner: <mailto:pgsql-admin-owner@postgresql.org>
List-Post: <mailto:pgsql-admin@postgresql.org>
List-Subscribe: <mailto:majordomo@postgresql.org?body=sub%20pgsql-admin>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-admin>
X-Mailing-List: pgsql-admin
Precedence: bulk
Sender: pgsql-admin-owner@postgresql.org

Hi All;

We have an application running via a utility that want's clear text 
passwords stored in it's config files. I know we can setup ident mapping 
but the app doesn't play nice with password prompt requests. We could 
set it's connections to trust but it kinda defeats the purpose security 
wise.

Any thoughts on best/common practices per connecting to postgres 
securely without an interactive password prompt

Thanks in advance





-- 
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin