Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1YvDj9-0002bF-Fd for pgsql-hackers@arkaria.postgresql.org; Wed, 20 May 2015 23:48:43 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.80) (envelope-from ) id 1YvDj8-000396-RD for pgsql-hackers@arkaria.postgresql.org; Wed, 20 May 2015 23:48:42 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:RSA_AES_256_CBC_SHA256:256) (Exim 4.80) (envelope-from ) id 1YvDj7-000390-La for pgsql-hackers@postgresql.org; Wed, 20 May 2015 23:48:41 +0000 Received: from tamriel.snowman.net ([2001:4830:167b::11]) by magus.postgresql.org with esmtp (Exim 4.84) (envelope-from ) id 1YvDj5-0006GP-0L for pgsql-hackers@postgresql.org; Wed, 20 May 2015 23:48:41 +0000 Received: by tamriel.snowman.net (Postfix, from userid 1000) id 199A45F799; Wed, 20 May 2015 19:48:38 -0400 (EDT) Date: Wed, 20 May 2015 19:48:38 -0400 From: Stephen Frost To: Michael Banck Cc: Tom Lane , Alvaro Herrera , Josh Berkus , Volker =?iso-8859-1?Q?A=DFmann?= , Robert Haas , Andrew Dunstan , "pgsql-hackers@postgresql.org" Subject: Re: Disabling trust/ident authentication configure option Message-ID: <20150520234837.GP26667@tamriel.snowman.net> References: <555CC5DE.3050707@agliodbs.com> <20150520175916.GB5885@postgresql.org> <23809.1432145430@sss.pgh.pa.us> <20150520221704.GA11196@raptor.chemicalconnection.dyndns.org> <20150520223158.GL5885@postgresql.org> <7661.1432163006@sss.pgh.pa.us> <20150520230925.GB11196@raptor.chemicalconnection.dyndns.org> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="Pes7OZCOzfZhFQfq" Content-Disposition: inline In-Reply-To: <20150520230925.GB11196@raptor.chemicalconnection.dyndns.org> X-Editor: Vim http://www.vim.org/ X-Info: http://www.snowman.net X-Operating-System: Linux/3.13.0-46-generic (x86_64) X-Uptime: 19:46:16 up 62 days, 5:34, 11 users, load average: 0.09, 0.05, 0.05 User-Agent: Mutt/1.5.21 (2010-09-15) X-Pg-Spam-Score: -1.9 (-) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-hackers Precedence: bulk Sender: pgsql-hackers-owner@postgresql.org --Pes7OZCOzfZhFQfq Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable * Michael Banck (mbanck@gmx.net) wrote: > On Wed, May 20, 2015 at 07:03:26PM -0400, Tom Lane wrote: > > I think Andres' point about "trust" being an essential disaster recovery > > mode is something to consider, as well. That puts pretty strict limits > > on what would be a credible replacement. >=20 > Then let's rename it from `trust' to `disaster'... ;) While certainly an amusing idea, I'm afraid that it's simply not worth the complaints we'd get, as we wouldn't have materially improved things. :/ Not only that, but they might mistakenly believe that it's then only available when doing recovery or something along those lines. Thanks! Stephen --Pes7OZCOzfZhFQfq Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJVXR1VAAoJEO1sijiDR2RVqZ0QAI43n4ZVDz8Fl8vklxajbXO9 Tit1dDmhbex4VqyiVrv9z8m+KBOH6Tn7Q/4MtroOIE7Lw7f1BoGTecd9f2lGYkSE CaOtAkF57vK6lDxpW4YEBG+5bG98cfOqi8SFthbSQEcgWYh1B7dJIoaPsYrbmA2F TMlv6dOIHSnlOaswgL3M5synqV+J+ieylYVTkYEZHMm3uOTZH94Ls6FBTI7Nt4tw xZRDMWpAlqESeiNPkeLdfeG0czxJlowQrKOhCsXWfygu9AozyNCdh7nTW80iXGkf CNIMWKslI+xdGQo15LYz6IQ3jRE+05ImGpR6TLnYZ3Jw5AVYYMLisFY7pXoAEIQf 4BT+NP5znOe7Ploo8ER/HNxxYghkAW+bjUsx1HZPOTgjCTrl6JGTNDXT5Y88O3gB j5teHwUmuyBK4WN6SCfO9VH8cONRjBzkrwEhoCDh8ZINycrknAEHBk37JbvGy+Jv fJSZ3lSRzaOnZyWS6GTjVxaYLhtWrvrJqnRSFOWXkkbL2mXYoAnS9hkhtsU+r6jW idSuzKzcodNiCKaTbbGtimFhEEHPYr3fyAknBu0mRmp7dsQeUmLsHDcIHKXuTVzh LHZPe0I/TzOJfbjixH4aQapruJc7vg0p/b4vQ4FZGa+2KMXRxK81xC/m7KP53Vp/ XiVgQtPOO28VcoBnoDlX =lwa1 -----END PGP SIGNATURE----- --Pes7OZCOzfZhFQfq--