Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1Yq5w6-0006LA-7j for pgsql-hackers@arkaria.postgresql.org; Wed, 06 May 2015 20:28:54 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.80) (envelope-from ) id 1Yq5w5-00036a-FB for pgsql-hackers@arkaria.postgresql.org; Wed, 06 May 2015 20:28:53 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:RSA_AES_256_CBC_SHA256:256) (Exim 4.80) (envelope-from ) id 1Yq5w4-00036O-Jz for pgsql-hackers@postgresql.org; Wed, 06 May 2015 20:28:52 +0000 Received: from relay3-d.mail.gandi.net ([2001:4b98:c:538::195]) by magus.postgresql.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.84) (envelope-from ) id 1Yq5w1-0001dg-H6 for pgsql-hackers@postgresql.org; Wed, 06 May 2015 20:28:51 +0000 Received: from mfilter24-d.gandi.net (mfilter24-d.gandi.net [217.70.178.152]) by relay3-d.mail.gandi.net (Postfix) with ESMTP id D6A32A8075; Wed, 6 May 2015 22:28:46 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at mfilter24-d.gandi.net Received: from relay3-d.mail.gandi.net ([217.70.183.195]) by mfilter24-d.gandi.net (mfilter24-d.gandi.net [10.0.15.180]) (amavisd-new, port 10024) with ESMTP id oGr5Ki4HsR0e; Wed, 6 May 2015 22:28:45 +0200 (CEST) X-Originating-IP: 98.27.58.255 Received: from [192.168.10.146] (cpe-98-27-58-255.nc.res.rr.com [98.27.58.255]) (Authenticated sender: adsend@dunslane.net) by relay3-d.mail.gandi.net (Postfix) with ESMTPSA id B0A0EA80B1; Wed, 6 May 2015 22:28:44 +0200 (CEST) Message-ID: <554A797B.1010101@dunslane.net> Date: Wed, 06 May 2015 16:28:43 -0400 From: Andrew Dunstan User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.2.0 MIME-Version: 1.0 To: Robert Haas CC: Alvaro Herrera , =?UTF-8?B?Vm9sa2VyIEHDn21h?= =?UTF-8?B?bm4=?= , "pgsql-hackers@postgresql.org" Subject: Re: Disabling trust/ident authentication configure option References: <20150506144724.GU2523@alvh.no-ip.org> <554A720F.1030706@dunslane.net> In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-Pg-Spam-Score: -1.9 (-) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-hackers Precedence: bulk Sender: pgsql-hackers-owner@postgresql.org On 05/06/2015 04:19 PM, Robert Haas wrote: > On Wed, May 6, 2015 at 3:57 PM, Andrew Dunstan wrote: >> I don't necessarily object to this idea, but I do think we need to ensure >> that we don't allow both trust and peer to be disabled (which means on >> Windows you would not be able to disable trust). Otherwise this becomes a >> footgun which would require the whole server to be stopped so you could >> connect in single user mode to correct certain mistakes, which are >> unfortunately all too common. > Of course that's precisely what the OP wanted to do, which goes to my > point that not everybody's going to want the same thing. > If that is indeed the proposal, then I vote no. But he did say upthread: > Single user sessions would work, but the "peer" authentication is also > still available and should be the preferred method to reset passwords > when trust is disabled, so this should not be an issue. (Personally I think there's a very good case for completely ripping out RFC1413 ident auth. I've not seen it used in a great long while, and it's always been a security risk.) cheers andrew -- Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers