Date: Wed, 20 May 2015 16:33:35 -0400
From: Stephen Frost <sfrost@snowman.net>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Josh Berkus <josh@agliodbs.com>,
 Alvaro Herrera <alvherre@2ndquadrant.com>,
 Volker =?iso-8859-1?Q?A=DFmann?= <volker.assmann@gmail.com>,
 Robert Haas <robertmhaas@gmail.com>, Andrew Dunstan <andrew@dunslane.net>,
 "pgsql-hackers@postgresql.org" <pgsql-hackers@postgresql.org>
Subject: Re: Disabling trust/ident authentication configure option
Message-ID: <20150520203335.GN26667@tamriel.snowman.net>
References: <CB1A1AB6-B345-4ED7-A705-D87E4DC99E11@gmail.com>
 <CAJBpAdzH3pMTFfBE+dYd+OytVJXR2XF=ESQ7TG6syjB1suh2ZQ@mail.gmail.com>
 <WM!22b0c9d0d605588edea2c700c71c4e0b51033b37a1185be38d4160d6de08c76eba51fd2754a9d1446b4cfb3fccceb9ce!@asav-2.01.com>
 <555CC5DE.3050707@agliodbs.com>
 <20150520175916.GB5885@postgresql.org>
 <23809.1432145430@sss.pgh.pa.us>
 <WM!6a10d1d9bf3d237078cee58af8aba8eb1f4eb065a68f02eece6d9cc0dfc8c8357d255d0f6f5ccadf019b03dbf1877c5d!@asav-2.01.com>
 <555CDC56.5050607@agliodbs.com>
 <20150520194223.GM26667@tamriel.snowman.net>
 <3359.1432151851@sss.pgh.pa.us>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature"; boundary="2IK6idz0sKKouFF6"
Content-Disposition: inline
In-Reply-To: <3359.1432151851@sss.pgh.pa.us>
User-Agent: Mutt/1.5.21 (2010-09-15)
Precedence: bulk
Sender: pgsql-hackers-owner@postgresql.org


--2IK6idz0sKKouFF6
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Tom,

* Tom Lane (tgl@sss.pgh.pa.us) wrote:
> Stephen Frost <sfrost@snowman.net> writes:
> > I don't agree with this either.  Providing a "bypass all authentication"
> > configuration option really isn't a good thing.  Why don't packagers use
> > our default pg_hba.conf?  Because it only makes sense in a development
> > type of environment.  I'd argue the same is true for 'trust'.
>=20
> Sure.  And the problem is that development environments are a perfectly
> common and respectable use-case.

Apologies for the confusion- the 'development type of environment' I was
referring to above is the environment where our default from-source
pg_hba.conf is installed: when doing *PostgreSQL* development.  I don't
see the use-case for using 'trust' when doing application development
with PG as a database.  I've certainly not used it before and when I've
found it in places that I've gone, after explaining how it actually
works, everyone I've worked with has either changed it or made plans to
do so.

> If we could get to a point where there is another way that is superior
> to "trust" even for single-user development environments, then maybe
> it would be useful to try to persuade packagers to disable "trust".

I agree with this, as mentioned up-thread.  Having a way to support
single-user development / running of PG would really need to exist
before we could encourage getting rid of 'trust'.

> But I don't even see a proposal for such a thing, let alone a track record
> showing that nobody needs "trust".  And you really have got to get to the
> point of being able to argue that *nobody* needs trust, not that some
> use-cases don't need it, before you will impress most packagers.

I don't see a real proposal for it either; I was simply trying to
outline a path forward, one which I would agree with, rather than
simply saying "no, never."

	Thanks!

		Stephen

--2IK6idz0sKKouFF6
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBCgAGBQJVXO+eAAoJEO1sijiDR2RVx5sP/jJPip92LI/VHqNR+2Z39z4C
vchuHsH9YWzLIwYvphWI6igS+kU7DOtC5BwZ1jo4QmRyqRb8cjA5UdK+SAwgMfeF
yFzZ/UDb7iDTFwgE1eg5l4zd99RdS9lWNrBvNPGK+ezuCdTVdXCVE7DRA4kfIWGn
woE5/exzZFH6Xqi1s6UUtg0Hxsnim2HcRReUzqE77NyZGmhg2hoSdht6V26uIpiz
9PfuB7d0jGR/2HL1yGb2UIWRRaLd+MhLuxZJRGvlk8QIgR95IgkRjX8yZBztKgrz
kX8CXUKj0MoJulFGv3RszJ9ougDKxnikE1v1T7cvhkfHEkaZE90ar7e43q1y2ub4
FRa7d/FD6kdsNaym0iu8FvAUqpztJY2NPdGJXLT89ai18oB7Qq4sEB6E82A+eiIC
zf6mFvcBePTT4TeL6A32D0RePNwkHlziOYdMBfNjugmjOncuE6drdda76KlnVKKO
cGphDz2f7sVKJO6Qt/jWA3hGQaTSdU81ILhtLj7qZKG3niIPOiudTfuUIPE0L8jB
2XPCWpyl7lFkOJqCmOq8TzMLwWTZu6qe+l9DzKeMSuoLu+z95YRiH+rLQlUIQSV4
TXubbzzRZOjlRYI3ypuqAG5KjiA0jhY+AOoHXti0W7CGQm7iOwDYai3hQnqp+xb6
FP70863f+DwCKGevfiU1
=tPZ8
-----END PGP SIGNATURE-----

--2IK6idz0sKKouFF6--