Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vjmqL-004OE1-0H for pgsql-hackers@arkaria.postgresql.org; Sat, 24 Jan 2026 23:15:01 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1vjmqJ-003jkF-37 for pgsql-hackers@arkaria.postgresql.org; Sat, 24 Jan 2026 23:15:00 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vjmqJ-003jk7-1y for pgsql-hackers@lists.postgresql.org; Sat, 24 Jan 2026 23:15:00 +0000 Received: from mail-dl1-x122e.google.com ([2607:f8b0:4864:20::122e]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.96) (envelope-from ) id 1vjmqH-0028jK-02 for pgsql-hackers@lists.postgresql.org; Sat, 24 Jan 2026 23:14:58 +0000 Received: by mail-dl1-x122e.google.com with SMTP id a92af1059eb24-123387e3151so252243c88.3 for ; Sat, 24 Jan 2026 15:14:57 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1769296496; cv=none; d=google.com; s=arc-20240605; b=A6qqKZq+D3uEBpbYIA0Q7zwWraGKaKVyxTdFBdwZTWyX9dwncQHLv31C9QFYRVlfI4 OnRl7CweUMIrlb31fh5k53GJPFGU3LKeTQ6ilPQfwJZvylL1Wx69lMfL7ZKjuCWu8vIN a8DbnkhMoStAgWUs/ac+w+FTDv0QcfmHladLE2zRmacq2opY8MCA9fW1Wt5WWYXlNmQW JSEvfKKw2ZUJQryPqpQV8HrKK6ngamRmNoPNev/GMYsEX5wDiuZoZ6ScYa4hkeBxhmTt MwjgWUfbOutKVf/+xNgswEyKrKjotSesb+nvEnBbkwDjw4IMVRmJKmgGdwfjfj52/Mwu lVqA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:dkim-signature; bh=Z71FIia4TvbFJ5GOVvgRosS+glk3T7JCijV3O/oF9Bc=; fh=FXaEHUV6hkJN4TNctynsH1BRYUstjtJiZHzx3d6tj+c=; b=gH2meG9lyA5y6rmUWQ/u3kodLOkysMdKbs+ZEJiUkEwB03pOxfH2DhB8FQa55WmGkA HMmCRw7M/V2wvAfbO04Wf4Rd72YIoVqVeqKNlobXzgAFmr068UuARRIpRZ+EiCEHQJJ9 uA3yn3tJ3aJqBtImT4xgPNRRz2i4smhY24gPu9OafdDfSmrz1bJowlQsU8z2DUhxHCZ7 ENXKecvOS1F/1JnnpTDabweZZ0KVNLZzdMMortR9Lf3RmcW2zNEd969Y8gadI4Kt9Swl JHioTl6Po2ze4lZBkpXWej3fWHy/Ak157ZaYjjioyxGyMmg4qbe/VITCprOHgIfvp/qY kLpA==; darn=lists.postgresql.org ARC-Authentication-Results: i=1; mx.google.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1769296496; x=1769901296; darn=lists.postgresql.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=Z71FIia4TvbFJ5GOVvgRosS+glk3T7JCijV3O/oF9Bc=; b=KixXcX5K5KpXx3Mq3HISi7bSf4YoR649Ij1ytLonboPpa0Id6iLiGPFjLDG9xO0jVI hoQRUf2wG4mO14scevko9DCFuV87yCRud3atIvR4eDQ/2v5NtwRXMTe3f1Qh9HIyHZxV JiOCIe1t6k9Zjl8B5QEP9F2fr+byxwkv/JHOPkYIj0AJCku6yJ88iXy6oIT7mmL2vgrr 5c+ac4cz95qDO1ri7aMbncUfALjWNhwSr3xd1/Sz5R17lEgKULxHidWUlJsk1dMUKGYE fRw2XFcZ7g203+yeWND7jx/xzdlVUshHcfNmz+tbHYQgrTCTjafwzRl7Is7062dSlUrk +Vpg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1769296496; x=1769901296; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=Z71FIia4TvbFJ5GOVvgRosS+glk3T7JCijV3O/oF9Bc=; b=BJh/ZZUA5XWXkwvFPv93Op3vDQzFbYksgRlkif9V2Wr1EAB/rgNd88AmJxoO/kN59g oNBQ8CcG6xlkQv1lyV7QFMywlSbXU/yycsa68BF39IzhvlT2aTVtVOPH4QuzD7oQpWdU 1O4/wJJ4i6AuqD0RlvbtwtQ+u2Z9NcK3sp6392VOwFXDrIB+r2rjW6+ou0Q3FtVcikQ1 FW+os/gR4aQaFtCGBe6Q7I7grcf0MFtYo+WkbbRirM1I9lJo25KmfWLpT3zdyaTuPd/0 POivmbU1VqZJCey+fm4UyzjN5xuI+mIo+U4MMu9djXM4+ccygpSBUMWi6wPO8xxsHgrK 6nzA== X-Forwarded-Encrypted: i=1; AJvYcCWeZ6rW1hK0w7NEq2PIjPz7s4i1wPkUR+WKY+UM822Q6m6MAzNTqgbyBO8yTM76RqJEdmmellcMFFZVxtkI@lists.postgresql.org X-Gm-Message-State: AOJu0YxkpFvU8zlDAgFvGVjeKuOOtYshrDIM4BiNn9904h9BtW+4XTLj Ur6ZvraBI9wI7vyoUY5aekp2dWn16zUpGZadbVUwqd5dslTdP8jZ+LjKwiEFnpAYwIdo7Vn7Zf+ SIkhqCvQ96DqLdvIs6wVzAN3TucJp4tM= X-Gm-Gg: AZuq6aIRyEE1SdXhXOPHsMuZNDLzU9D3ljfAd9m8y7z7shjXxC4GEugGUwSMJjh1JV/ 4paZNrbI8Z8BrLqLnjw1FoBAGNmWngaNMweYP2CmLoh1rZxSj/YScjrBtak5UiMGiyNSevM0GJ9 NYalOL6VsKkPmdOGz5PitwsND4EMKbq2zIEJUL6FMuvOV9/fgY8ddue232+uPQfe85bcXgmgls0 QqsvvYiatFMZHWYrBgd7thYBUZbae2sYcNQioS4BNoSJcpYh1Vq90XgQ+af8O+TgITZUtpjpJGK vA9JLnzceAVSiRyMPBSo52SxOX4yMMZVBv5g7nmUx/9Ko81wwrP33YYjco/BUak= X-Received: by 2002:a05:7022:7ab:b0:11b:1c6d:98ed with SMTP id a92af1059eb24-1248ebc8842mr67430c88.2.1769296496497; Sat, 24 Jan 2026 15:14:56 -0800 (PST) MIME-Version: 1.0 References: <202601231423.4522ubhwkcwj@alvherre.pgsql> <3112825.1769185807@sss.pgh.pa.us> In-Reply-To: From: Thomas Munro Date: Sun, 25 Jan 2026 12:14:19 +1300 X-Gm-Features: AZwV_QgCSNFDwCmTzjIOzC5H_6qivPSJD65Cs6dtLtZKh6H1aT1iC-qg3thgdUU Message-ID: Subject: Re: Time to drop RADIUS support? To: Jacob Champion Cc: Tom Lane , =?UTF-8?Q?=C3=81lvaro_Herrera?= , Michael Banck , PostgreSQL Hackers Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Sat, Jan 24, 2026 at 6:50=E2=80=AFAM Jacob Champion wrote: > On Fri, Jan 23, 2026 at 8:30=E2=80=AFAM Tom Lane wrot= e: > > > I don't think removing it entirely from all back branches is a good > > > idea, without first making sure that there are no users. > > > > Agreed, we can't pull it from the back branches. But I'm in favor of > > pulling it from HEAD if we document how to use PAM-based RADIUS > > instead. I agree with Thomas' argument that the cost-benefit ratio > > of fixing our implementation would be poor. > > +1. Great, it sounds like we have a plan. I think the wiki might be a good place for that documentation. The details are likely to change, and I wouldn't want to have to maintain that information in-tree, so I created some PAM how-to documentation at https://wiki.postgresql.org/wiki/RADIUS after testing on Debian and FreeBSD. We could point to that from the 19 release notes and in the deprecation notice added to the documentation for 14-18, calling it "community-maintained guidance on migration to supported configurations". Do we need to keep any trace of this in the 19 docs, and if so, where? A new tombstone section?