Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nw16a-0007hd-KD for pgsql-docs@arkaria.postgresql.org; Tue, 31 May 2022 12:36:12 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1nw16Z-0007VQ-FK for pgsql-docs@arkaria.postgresql.org; Tue, 31 May 2022 12:36:11 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nw16Z-0007VG-4K for pgsql-docs@lists.postgresql.org; Tue, 31 May 2022 12:36:11 +0000 Received: from mail-lf1-x129.google.com ([2a00:1450:4864:20::129]) by magus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1nw16V-0008J5-6R for pgsql-docs@lists.postgresql.org; Tue, 31 May 2022 12:36:10 +0000 Received: by mail-lf1-x129.google.com with SMTP id y32so21238257lfa.6 for ; Tue, 31 May 2022 05:36:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hagander-net.20210112.gappssmtp.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=cXyCBSZ45guS9FGDuc1MGjNvDkSwkMXZ+I3MC/ePoUg=; b=SLjz4aBAinw3imhYmS32NXs4WJ+z9jyhhPgVm129+f/mNgTOwzIy9MXSaGUfKeZd5Q M+lu1KPMw1Etau6azimei2BbpfWmGAqg9GFkhO+nnHryOSYWXzIcOho9Fz+J0lFQ4EAs tajEXB2gT/a1Qw6Rr5UM5/RY3KH3aXFG9AJSnCcOKN71SCHudd+xl1yfCbcQcI5nI6nI TNznInc6Lwcvs2ws0V9UsC85/sqwpJEzY5ONaMGzzxUa6SUnyq4b1vohnxlsP5zlslrR eBQwXVJTtDx43kKkaAAk7i5dsqfS0wOwB7IP4qa1Mn7PRZH2yzNWktSCsO/jvB7QsoTc 4OAg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=cXyCBSZ45guS9FGDuc1MGjNvDkSwkMXZ+I3MC/ePoUg=; b=s5+O3y036gasyt9gwR1fmFZA8QAOenSpNUMVoVKm1+BaoBPPVOLgfWgI7zg2qCOcbL SBMJZjh2FRCCleVKVmUlxxUqRIqSRZymqAsUbwYOZvMl2sy2pTGQeQMJT4ARRDyg3/TU R1LTOU9yYobTj/pdcJLlerhIf+LeaY7KDNAVGN/5u5EoUoCRcm9DT9SGcAEHeFSCfamY Wab1G6KYGrM8C4+1reNb5a+DosCI7AVem94rEJGTEsfOZ/ti23bQDdsH/8EVpfSPz9kv WuXU+uvibcgi1wdzTfm/EigXMEs4xU6DT7RjKL6kPHXoek+I2U6tReyXOMGG53wFAdOR QszQ== X-Gm-Message-State: AOAM5304Q12+LAm4moxx/qM9WNBlmWdMgqHq01ymE9XumFN0IpBqXCPj t76xd3OPFmE99SmJv1i8cAfymCxLSRE0om8PwUt3rJoOrug= X-Google-Smtp-Source: ABdhPJyGXY6UOU7Ig/hcpgF1angYzoOnNijPEbFpraiEIiv+S/dqMvBFmV1iQkzAA4X1Gw5u1zr753VDfJhPVE/uL54= X-Received: by 2002:a05:6512:3da6:b0:478:3565:3958 with SMTP id k38-20020a0565123da600b0047835653958mr41701010lfv.374.1654000566273; Tue, 31 May 2022 05:36:06 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Magnus Hagander Date: Tue, 31 May 2022 14:35:53 +0200 Message-ID: Subject: Re: Should we really recommend "-A md5 or -A password"? To: "Daniel Westermann (DWE)" Cc: "pgsql-docs@lists.postgresql.org" Content-Type: multipart/alternative; boundary="000000000000361ea505e04e0480" List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --000000000000361ea505e04e0480 Content-Type: text/plain; charset="UTF-8" On Tue, May 31, 2022 at 2:29 PM Daniel Westermann (DWE) < daniel.westermann@dbi-services.com> wrote: > Hi, > > I just came across this: > "Also, specify -A md5 or -A password so that the default trust > authentication mode is not used;" > https://www.postgresql.org/docs/current/creating-cluster.html > > Shouldn't we change that to "-A scram-sha-256" ? > Yes I think we absolutely should! -- Magnus Hagander Me: https://www.hagander.net/ Work: https://www.redpill-linpro.com/ --000000000000361ea505e04e0480 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


=
On Tue, May 31, 2022 at 2:29 PM Danie= l Westermann (DWE) <daniel.westermann@dbi-services.com> wrote:
Hi,

I just came across this:
"Also, specify -A md5 or -A password so that the default trust authent= ication mode is not used;"
https://www.postgresql.org/docs/current= /creating-cluster.html

Shouldn't we change that to "-A scram-sha-256" ?

Yes I think we absolutely should!=C2=A0
=

--
=C2=A0Magnus Hagander
=C2=A0Me: https://www.hagander.net/
=C2=A0Work: <= a href=3D"http://www.redpill-linpro.com/" target=3D"_blank">https://www.red= pill-linpro.com/
--000000000000361ea505e04e0480--