Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vjIXO-00CWsQ-06 for pgsql-hackers@arkaria.postgresql.org; Fri, 23 Jan 2026 14:53:26 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1vjIXL-0006g6-29 for pgsql-hackers@arkaria.postgresql.org; Fri, 23 Jan 2026 14:53:24 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vjIXK-0006fy-2v for pgsql-hackers@lists.postgresql.org; Fri, 23 Jan 2026 14:53:23 +0000 Received: from fout-b8-smtp.messagingengine.com ([202.12.124.151]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vjIXI-001vR5-0H for pgsql-hackers@lists.postgresql.org; Fri, 23 Jan 2026 14:53:21 +0000 Received: from phl-compute-03.internal (phl-compute-03.internal [10.202.2.43]) by mailfout.stl.internal (Postfix) with ESMTP id 28E811D000E3; Fri, 23 Jan 2026 09:53:19 -0500 (EST) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-03.internal (MEProxy); Fri, 23 Jan 2026 09:53:19 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kurilemu.de; h= cc:cc:content-transfer-encoding:content-type:content-type:date :date:from:from:in-reply-to:in-reply-to:message-id:mime-version :reply-to:subject:subject:to:to; s=fm1; t=1769179999; x= 1769266399; bh=Ib+65wMEqojV8HoiPkY8jL0tzFTdGkXMGW6gQ6qHNF4=; b=W hfttHnrHJokO8CQWVMrOyg3EAoftroK08v1kvwo3WrJMUl2XcOZo5Sy2jf7BSbQs xyuSXAWDAA5ArSS81hSa6rbAlyMuvRO/jCq86n/NgqV7PtEn8y5HCEtdDuMLEPTE 3nRc/z3P+zFFV9FvYToewn9bVga/RmdeA4c67cD97JLI7M4kdBzBRhiaTisa2XVM yDxQW4eh7+PtzLPC/cTONkfrdYrZZdMM/hfcOMZYBuy+J28LpJU6BZOrpyD9Diu8 LuYShhbHJ7DhRbmYqL5Cx1OPD6or7gBcjN5NwV9yi7u1lxwJkq/8dI8axnsyzlww TSYFJs79U6PG20jIAst8w== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:content-type:date:date:feedback-id:feedback-id :from:from:in-reply-to:in-reply-to:message-id:mime-version :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1769179999; x=1769266399; bh=I b+65wMEqojV8HoiPkY8jL0tzFTdGkXMGW6gQ6qHNF4=; b=ADdhOkzOAr151M7Oy JNRLsOoG+lek7Wbh+Xh3U3hLz0h1tJQvU7yWN/JtWVvF6HLzPXM+KVAgLA0GYJs+ 7P9B8n/jyNgsISoIiitWzKnzUaRbjti/zdcYq+Lqp5N4jWn7X10JtGTieQoTQtUB 82ceYen6sqmiyM8fmgMxttc7SZMPwjQ9uzH3Cbp5DMEDxlR5RqwOTwSI1Evmtd7s /KS5Ahedp9UkF3/Z/cZ+VaYasMVffOTV8l1FL34yvsy4aG97/o8HFwkYB/v/xY43 lmBv2Pyk63JYXwae3OHEJN1MrYLX/sjAN//A7cj4z7u9sK0cTpJ5eqJh9VrByz2A r1bFw== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefgedrtddtgddugeelfeefucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfurfetoffkrfgpnffqhgenuceu rghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmnecujf gurhepfffhvfevuffkgggtugfgjgesthekredttddtjeenucfhrhhomheplmhlvhgrrhho ucfjvghrrhgvrhgruceorghlvhhhvghrrhgvsehkuhhrihhlvghmuhdruggvqeenucggtf frrghtthgvrhhnpedtheehtdekffffteefkefhhfffgeethfejkeevueevudeuudegffel ieevffehfeenucffohhmrghinhepvghnthgvrhhprhhishgvuggsrdgtohhmpdhpohhsth hgrhgvshhqlhdrohhrghenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgr ihhlfhhrohhmpegrlhhvhhgvrhhrvgeskhhurhhilhgvmhhurdguvgdpnhgspghrtghpth htohepfedpmhhouggvpehsmhhtphhouhhtpdhrtghpthhtohepthhhohhmrghsrdhmuhhn rhhosehgmhgrihhlrdgtohhmpdhrtghpthhtohepmhgsrghntghksehgmhigrdhnvghtpd hrtghpthhtohepphhgshhqlhdqhhgrtghkvghrsheslhhishhtshdrphhoshhtghhrvghs qhhlrdhorhhg X-ME-Proxy: Feedback-ID: ie3de48e3:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Fri, 23 Jan 2026 09:53:17 -0500 (EST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kurilemu.de; s=schmee; t=1769179993; bh=6Fgx6SgbvjuA2yrVOEO+CxCWD5e+fcFxvECdfGxLSzM=; h=Date:From:To:Cc:Subject:In-Reply-To:From; b=TLjTvia82BAPsjGBigtc9UhoDfyQwrPFLoZMVwY8Fp4RMs/XY9OzTumfvo+abHFGp pKP0OYKNdS8nGkIrh0u4OkTAdd1ZzxM7xt4uHwxtYZUTTWnSqzkrqapLcJgb+s1cku 787xqVLs5YqGkWEP4RIbkCQaPQpyCMn4yrvybfiD+Gp2Kq7ysrNwLF8X9zhmTvkkjK NaEWtIHxGI1woVaEh/W98u7blza0mkY+OTwvhygYH3JMf6e/t0OL6uX53scHQj5f0R bUxfUrdKrhm2Nl3NzcI/u0cgzEd7Ga4APB8BN7JH896ps7lgTQQI3ew5WA1ajMXMBn xPl94SgXVb5EQ== Received: by schmee.kurilemu.internal (Postfix, from userid 1000) id EB8557A; Fri, 23 Jan 2026 15:53:13 +0100 (CET) Date: Fri, 23 Jan 2026 15:53:13 +0100 From: =?utf-8?Q?=C3=81lvaro?= Herrera To: Michael Banck Cc: Thomas Munro , PostgreSQL Hackers Subject: Re: Time to drop RADIUS support? Message-ID: <202601231423.4522ubhwkcwj@alvherre.pgsql> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <20260123104322.GA17962@p46.dedyn.io;lightning.p46.dedyn.io> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On 2026-Jan-23, Michael Banck wrote: > So you are saying we add a deprecation notice in the back branches and > drop it in V19? If this is a severe security issue then maybe we can > just remove it everywhere (ugh), or if not, I think it probably warrants > at least one release cycle of deprecation. Do we have a formal > deprecation timeline policy nowadays? I don't think we do. Would it work to add a WARNING (or something) to all back branches to ask users to write here, so that we can confirm in the next few months whether the protocol is completely unused or not? If we do find users, then we could try to think of workarounds[*], but otherwise we'd just remove it for pg19 (or pg20 at the latest) and not waste any more time on it. I don't think removing it entirely from all back branches is a good idea, without first making sure that there are no users. [*] or even just a way to document a migration to PAM-based Radius. -- Álvaro Herrera 48°01'N 7°57'E — https://www.EnterpriseDB.com/ "I'm impressed how quickly you are fixing this obscure issue. I came from MS SQL and it would be hard for me to put into words how much of a better job you all are doing on [PostgreSQL]." Steve Midgley, http://archives.postgresql.org/pgsql-sql/2008-08/msg00000.php