Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1YR16c-0002fo-VD for pgsql-admin@arkaria.postgresql.org; Thu, 26 Feb 2015 16:16:07 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.80) (envelope-from ) id 1YR16b-0005bV-S0 for pgsql-admin@arkaria.postgresql.org; Thu, 26 Feb 2015 16:16:05 +0000 Received: from makus.postgresql.org ([2001:4800:1501:1::229]) by malur.postgresql.org with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA256:256) (Exim 4.80) (envelope-from ) id 1YR16X-0005Tc-01 for pgsql-admin@postgresql.org; Thu, 26 Feb 2015 16:16:01 +0000 Received: from mail-yk0-x22c.google.com ([2607:f8b0:4002:c07::22c]) by makus.postgresql.org with esmtps (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.80) (envelope-from ) id 1YR16T-0005bq-M9 for pgsql-admin@postgresql.org; Thu, 26 Feb 2015 16:15:58 +0000 Received: by ykp131 with SMTP id 131so4515361ykp.3 for ; Thu, 26 Feb 2015 08:15:57 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject :content-type:content-transfer-encoding; bh=imsJHC3/cyCHohKtk3RR2i6tmocf2kdCX2asVG1sjeY=; b=pdXYGvyqWfk3Zpxntagw9RpP5tziBKeR+6XfXjlM0qzCecRFsJSTEuCbrvL+3+ov8P /bwJ37dY5C/LIC2dTLiWH0RLErMoun6MZbbb4hD/WkXVP88hfpkqQePE6A9xTr6AypfX UAMXx/Kf6viNKaFCwln122Sj637U3x7ExD9sX8zDOpUBhERMi3mUbq/DA5rdNebk20+h u3jiLdFRmk0YP64AXtmb6YCMYnxBn41mOWT+g4vmpGGluVRB+MuMVUpvoGuCzJfOkjjr LSXVaio8soc/FvH/6X2Wz1QBK3h3on+qINeinp8BloQDUv4aB6EOWzM0W+qUwcJaAm18 AjEw== X-Received: by 10.236.40.79 with SMTP id e55mr9009304yhb.110.1424967356920; Thu, 26 Feb 2015 08:15:56 -0800 (PST) Received: from [192.168.254.3] (h77.89.102.166.static.ip.windstream.net. [166.102.89.77]) by mx.google.com with ESMTPSA id 61sm855895yhe.50.2015.02.26.08.15.55 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 26 Feb 2015 08:15:56 -0800 (PST) Message-ID: <54EF46B7.3000809@gmail.com> Date: Thu, 26 Feb 2015 11:15:51 -0500 From: John Scalia User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.4.0 MIME-Version: 1.0 To: "pgsql-admin@postgresql.org" Subject: Security with V9.3.3 standby servers Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-Pg-Spam-Score: -2.7 (--) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-admin Precedence: bulk Sender: pgsql-admin-owner@postgresql.org Hi all, An edict has been handed down here from on high that no script shall ever contain any password in cleartext for any reason. Well this is problem with a streaming replication standby server's recovery.conf file as the line primary_conninfo = contains said replication user's password for that connection. Is there any sort of plan to allow this to be md5 or some such encoded? Or what else could I do in this case? Thx, Jay -- Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-admin