From: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
To: Jonathan S. Katz <jkatz@postgresql.org>
To: Pg Docs <pgsql-docs@lists.postgresql.org>
Subject: Re: initdb recommendations
Date: Mon, 8 Apr 2019 14:25:07 +0200
Message-ID: <0258afa0-db19-3694-d34b-7f6b33ae81d0@2ndquadrant.com> (raw)
In-Reply-To: <bec17f0a-ddb1-8b95-5e69-368d9d0a3390@postgresql.org>
References: <bec17f0a-ddb1-8b95-5e69-368d9d0a3390@postgresql.org>
On 2019-04-05 18:11, Jonathan S. Katz wrote:
> + <para>
> + We recommend using the <option>-W</option>, <option>--pwprompt</option>,
> + or <option>--pwfile</option> flags to assign a password to the database
> + superuser, and to override the <filename>pg_hba.conf</filename> default
> + generation using <option>-auth-local peer</option> for local connections,
> + and <option>-auth-host scram-sha-256</option> for remote connections. See
> + <xref linkend="client-authentication"/> for more information on client
> + authentication methods.
> + </para>
As discussed on hackers, we are not ready to support scram-sha-256 out
of the box. So this advice, or any similar advice elsewhere, would need
to recommend "md5" as the setting --- which would probably be embarrassing.
--
Peter Eisentraut http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-docs@postgresql.org
Cc: peter.eisentraut@2ndquadrant.com, jkatz@postgresql.org, pgsql-docs@lists.postgresql.org
Subject: Re: initdb recommendations
In-Reply-To: <0258afa0-db19-3694-d34b-7f6b33ae81d0@2ndquadrant.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox