Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1hV5Ex-0005Av-A1 for pgsql-hackers@arkaria.postgresql.org; Mon, 27 May 2019 02:19:55 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1hV5Ev-0007jf-0c for pgsql-hackers@arkaria.postgresql.org; Mon, 27 May 2019 02:19:53 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1hV5Eu-0007jU-LI for pgsql-hackers@lists.postgresql.org; Mon, 27 May 2019 02:19:52 +0000 Received: from out5-smtp.messagingengine.com ([66.111.4.29]) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1hV5Eo-0001Nz-86; Mon, 27 May 2019 02:19:51 +0000 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 8E1E221FB6; Sun, 26 May 2019 22:19:45 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute4.internal (MEProxy); Sun, 26 May 2019 22:19:45 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paquier.xyz; h= date:from:to:cc:subject:message-id:references:mime-version :content-type:in-reply-to; s=fm1; bh=0D2VuCZ1Tvu22+FDQhkLsK4WDPw 5QuIcn+C5+ZAtLdY=; b=fuyFvfPXQIsxEa6WJhhTucKZmbTo7MX8kdRh72dP0Ww W9pONRlOjX1faNReuTPkeE4+E0xb2Uek+RQ7vISKjId7KVZlqv9+Be2LKXHUX6KG SjjA+dej3z5FbWZR2fl5IVkGS1dXX0wXOTQ53UqYewQfpzzR0NjYaf4OdpYQ8yDp VKvyYtnG8iBrzBSu9aLl3hfjsvr0A1fhhgt5tDJoyfgu6xJFFJIbcZflhj/jybZL JIqsQxgdnmGOKQx5Yw0Kruv9Oe6uhq/K8y2FdiFRge5uauzU/L6/L8bS0Xz/KPaL HAMbirKhBoQ3Yv2AYnP9UeR+vee3OHvC4SSoIplBxVg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=0D2VuC Z1Tvu22+FDQhkLsK4WDPw5QuIcn+C5+ZAtLdY=; b=TK+hcV0clAXcJXp6VcqAd5 C15oAjbJfmns2R6HDvVGrr1AV7ctxkDdXr9Qw0ejIUcFL0mC3lOEWlEcI624GXWl FYeHBiwan1TJnYuspMfWNhDOTOehbZswHucZKlMy0rhdEkNT9ET/RIH3yo8taN8V +Nn7+OayTgZSk2Z1eIIVW4kAjGMNB3ZP8IkpkspWfbNWrdvxrQ0P7UUVdNZVlb6b PdgmCAQH4bIPw+wPBxZK+1SEnS/xRCaX+w589xG4QktsFZhyWrnN6/pKAxTqOr8v /PkkFRuCT49CsiAYbhP2iJKva1qUPg7qS3G2IfBLAw0U9PK9sTSipuHXadrU4Dlg == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduuddruddvuddgheehucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne gfrhhlucfvnfffucdljedtmdenucfjughrpeffhffvuffkfhggtggujgesghdtreertddt vdenucfhrhhomhepofhitghhrggvlhcurfgrqhhuihgvrhcuoehmihgthhgrvghlsehprg hquhhivghrrdighiiiqeenucfkphepudduuddruddtvddrudektddrudekheenucfrrghr rghmpehmrghilhhfrhhomhepmhhitghhrggvlhesphgrqhhuihgvrhdrgiihiienucevlh hushhtvghrufhiiigvpedt X-ME-Proxy: Received: from paquier.xyz (ee0822lan1.rev.em-net.ne.jp [111.102.180.185]) by mail.messagingengine.com (Postfix) with ESMTPA id 8F9798005C; Sun, 26 May 2019 22:19:42 -0400 (EDT) Date: Mon, 27 May 2019 11:19:39 +0900 From: Michael Paquier To: Noah Misch Cc: Magnus Hagander , Peter Eisentraut , PostgreSQL-development , "Jonathan S. Katz" Subject: Re: initdb recommendations Message-ID: <20190527021939.GF1963@paquier.xyz> References: <20190406180839.GA1921989@rfd.leadboat.com> <96389374-9454-d26d-6f79-7c7b15ec14bd@2ndquadrant.com> <20190524152357.GC1624191@rfd.leadboat.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="vSsTm1kUtxIHoa7M" Content-Disposition: inline In-Reply-To: <20190524152357.GC1624191@rfd.leadboat.com> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk --vSsTm1kUtxIHoa7M Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Fri, May 24, 2019 at 08:23:57AM -0700, Noah Misch wrote: > Our sspi auth is a more-general version of peer auth, and it works over TCP. > It would be a simple matter of programming to support "peer" on Windows, > consisting of sspi auth with an implicit pg_ident map. I am not sure that it is much worth complicating the HBA rules with an extra alias knowing that it is possible to map pg_ident to use a regex matching pattern. > Nonetheless, I agree password would be fine. Fine for me. -- Michael --vSsTm1kUtxIHoa7M Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEG72nH6vTowiyblFKnvQgOdbyQH0FAlzrSTsACgkQnvQgOdby QH0yCA/+PBHhzzOJNMgobj3rZ5Z/Z31h6Eq7F1s3LrIkQu3HQb0hpyUliQK5BRfe f5jaCrxuj8Kvp393IdYJTDCw5kYotYSUMIV62DMuyb1FA5RZ6ggJHaSs1P/e3YPZ ypTpyYdADOzJdCtgEb9vSR6n4+ebbwQ58c260FU8rqh62fSyk9lTmlUq3fqF18mw dP/WZ/gmtqIvW+nu/rmL+jHWHCblZ2uG0m+TET2DanH+h6cG/FfKZWijEdydpcES FM7caYdA9j+AJdtpagfzIOTrqXOp4dIMxK9AQrlq/D59yk1lLSlgQebQmtktdVdO cMXgB+PAzcouoku5YrTkwe2InoDigli577PPOFCPPve/etdl1o5EAQBjZgV+tsmB 2TR9rUlv6w/swjNwXtDnA8ux4tKFSYD/v41brmR6W2vW8JWCyerc7NOtFUqzJWDu +OGg1dSwSGmy1sD8Gf23IDkC9Shilgc357ZVMfx7uOetgB3EEIj+xjtyXY7aNJt7 vyKzhnepGwCnUFrjiZxOnrZMkE6W8CV8KsqGV2P1Sf6TJKvV7HVscvGo9hZq0Imo LaHjHe6i/Be0jqFxYFJyFEpkQZFuXWItzAZcz6tAPIU3AGN6PM6z1jOyx7sIzQ2U KGb4LWsMK6u9lXhoEbswll9pHAQLMGNOtlUItre6s9Rj5thDme0= =uv5A -----END PGP SIGNATURE----- --vSsTm1kUtxIHoa7M--