From: Magnus Hagander <magnus@hagander.net>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Tony Caduto <tony_caduto@amsoftwaredesign.com>
Cc: pgsql-general@postgresql.org
Subject: Re: Password issue revisited
Date: Tue, 20 Feb 2007 20:15:17 +0100
Message-ID: <45DB48C5.1000103@hagander.net> (raw)
In-Reply-To: <18922.1171998826@sss.pgh.pa.us>
References: <45BCACDB.5050702@007Marketing.com>
<200702201449.l1KEn0r21849@momjian.us>
<20070220150507.GD11927@svr2.hagander.net>
<45DB448A.3040308@amsoftwaredesign.com>
<45DB4624.4060800@hagander.net>
<18922.1171998826@sss.pgh.pa.us>
Tom Lane wrote:
> Magnus Hagander <magnus@hagander.net> writes:
>> Tony Caduto wrote:
>>> What about having a wallet type system where the user can create a pass
>>> phrase to protect a generated key that would get
>>> loaded once per session. That is how KDE allows users to store passwords.
>
>> If we wanted to do that, we could use the Windows API that's available
>> to do this. The idea with the pgpass flie is to have it compatible with
>> the unix version.
>
> More to the point, that's far outside the scope of this project. Use a
> PAM auth module that you like, or Kerberos or whatever. I'm way past
> tired of "let's put yet another authentication technology in libpq" requests.
Just to make things clear, this wouldn't be about another auth method.
Windows has an API to store arbitrary passwords in a "secure way". At
least it does in XP+, not sure if it was in 2000.
Not saying it's a good idea, but it's not another auth tech for libpq.
//Magnus
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-docs@postgresql.org
Cc: magnus@hagander.net, tgl@sss.pgh.pa.us, tony_caduto@amsoftwaredesign.com, pgsql-general@postgresql.org
Subject: Re: Password issue revisited
In-Reply-To: <45DB48C5.1000103@hagander.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox