Received: from localhost (maia-5.hub.org [200.46.204.182]) by postgresql.org (Postfix) with ESMTP id 6A4179FB8C1 for ; Tue, 20 Feb 2007 15:13:54 -0400 (AST) Received: from postgresql.org ([200.46.204.71]) by localhost (mx1.hub.org [200.46.204.182]) (amavisd-new, port 10024) with ESMTP id 36890-05 for ; Tue, 20 Feb 2007 15:13:49 -0400 (AST) X-Greylist: from auto-whitelisted by SQLgrey-1.7.4 Received: from sss.pgh.pa.us (sss.pgh.pa.us [66.207.139.130]) by postgresql.org (Postfix) with ESMTP id 1433E9FB820 for ; Tue, 20 Feb 2007 15:13:50 -0400 (AST) Received: from sss2.sss.pgh.pa.us (tgl@localhost [127.0.0.1]) by sss.pgh.pa.us (8.13.6/8.13.6) with ESMTP id l1KJDkQc018923; Tue, 20 Feb 2007 14:13:46 -0500 (EST) To: Magnus Hagander cc: Tony Caduto , pgsql-general@postgresql.org Subject: Re: Password issue revisited In-reply-to: <45DB4624.4060800@hagander.net> References: <45BCACDB.5050702@007Marketing.com> <200702201449.l1KEn0r21849@momjian.us> <20070220150507.GD11927@svr2.hagander.net> <45DB448A.3040308@amsoftwaredesign.com> <45DB4624.4060800@hagander.net> Comments: In-reply-to Magnus Hagander message dated "Tue, 20 Feb 2007 20:04:04 +0100" Date: Tue, 20 Feb 2007 14:13:46 -0500 Message-ID: <18922.1171998826@sss.pgh.pa.us> From: Tom Lane X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=0.063 tagged_above=0 required=5 tests=AWL, BAYES_50, SPF_HELO_PASS, SPF_PASS X-Spam-Level: X-Archive-Number: 200702/1073 X-Sequence-Number: 109563 Magnus Hagander writes: > Tony Caduto wrote: >> What about having a wallet type system where the user can create a pass >> phrase to protect a generated key that would get >> loaded once per session. That is how KDE allows users to store passwords. > If we wanted to do that, we could use the Windows API that's available > to do this. The idea with the pgpass flie is to have it compatible with > the unix version. More to the point, that's far outside the scope of this project. Use a PAM auth module that you like, or Kerberos or whatever. I'm way past tired of "let's put yet another authentication technology in libpq" requests. regards, tom lane