From: Tom Lane <tgl@sss.pgh.pa.us>
To: Stephen Frost <sfrost@snowman.net>
cc: Michael Paquier <michael.paquier@gmail.com>,
        David Steele <david@pgmasters.net>,
        Heikki Linnakangas <hlinnaka@iki.fi>,
 Bruce Momjian <bruce@momjian.us>,
        Greg Stark <stark@mit.edu>, Robert Haas <robertmhaas@gmail.com>,
        Josh Berkus <josh@agliodbs.com>, Peter Eisentraut <peter_e@gmx.net>,
        pgsql-hackers <pgsql-hackers@postgresql.org>
Subject: Re: WIP: SCRAM authentication
In-reply-to: <20160215012326.GK3331@tamriel.snowman.net>
References: <20150904194819.GE26916@momjian.us>
 <20150904205133.GB3685@tamriel.snowman.net>
 <20150905003147.GD21484@momjian.us>
 <CAB7nPqQutw9kRSmu9Ww5CY2Lpmn_=SWfiqgXDtDoH_jdrS7EgQ@mail.gmail.com>
 <56BE1ECD.3020905@pgmasters.net>
 <CAB7nPqTDD_tnU2Pb3LuFcEB0M8iZxAUzemcegqgztxWk26jL4w@mail.gmail.com>
 <20160215001725.GH3331@tamriel.snowman.net>
 <CAB7nPqQ-p0kiVsLZaDSDW2+pe3voO2R9qu6wgfYWZBJZRDC4Rg@mail.gmail.com>
 <20160215005640.GI3331@tamriel.snowman.net>
 <CAB7nPqQqg3PiU9ZREmTzh3_QSJOah7aUWKzhaJLAxQY_hF6JAQ@mail.gmail.com>
 <20160215012326.GK3331@tamriel.snowman.net>
Comments: In-reply-to Stephen Frost <sfrost@snowman.net>
	message dated "Sun, 14 Feb 2016 20:23:26 -0500"
Date: Sun, 14 Feb 2016 20:45:23 -0500
Message-ID: <5746.1455500723@sss.pgh.pa.us>
Precedence: bulk
Sender: pgsql-hackers-owner@postgresql.org

Stephen Frost <sfrost@snowman.net> writes:
> Why do we need pg_shadow or pg_user or related views at all..?

A lot of code looks at those just to get usernames.  I am not in favor of
breaking such stuff without need.

How about we just say that the password in these old views always reads
out as '********' even when there is a password, and we invent new views
that carry real auth information?  (Hopefully in an extensible way.)

			regards, tom lane


-- 
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers