Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1ijN68-0004YH-Eg for pgsql-pkg-yum@arkaria.postgresql.org; Mon, 23 Dec 2019 12:46:08 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1ijN67-0004JU-8b for pgsql-pkg-yum@arkaria.postgresql.org; Mon, 23 Dec 2019 12:46:07 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1ijN5w-0003RF-Kq for pgsql-pkg-yum@lists.postgresql.org; Mon, 23 Dec 2019 12:45:56 +0000 Received: from feynman.df7cb.de ([195.49.152.168]) by magus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1ijN5t-0007en-VE for pgsql-pkg-yum@postgresql.org; Mon, 23 Dec 2019 12:45:56 +0000 Received: from msg.df7cb.de (unknown [IPv6:2a02:908:1473:f520:76e5:bff:fef3:7e00]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by feynman.df7cb.de (Postfix) with ESMTPSA id 47hJxD2717z3F0H; Mon, 23 Dec 2019 13:45:52 +0100 (CET) Date: Mon, 23 Dec 2019 13:45:51 +0100 From: Christoph Berg To: Craig Ringer Cc: Devrim =?iso-8859-1?B?R/xuZPx6?= , pgsql-pkg-yum Subject: Re: Can we stop defaulting to 'ident'? Message-ID: <20191223124551.GC25095@msg.df7cb.de> Mail-Followup-To: Christoph Berg , Craig Ringer , Devrim =?iso-8859-1?B?R/xuZPx6?= , pgsql-pkg-yum References: <77df509da61adaebca6c5f0451f1c1616f1faa45.camel@gunduz.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.10.1 (2018-07-13) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk Re: Craig Ringer 2019-12-23 > The deb use md5 for 'host' and 'peer' for 'local'. While I think they do > support interactive password setting As already said upthread, we don't support that. People have to do it manually, and seem to be fine with that. > it's extremely common to run debconf > noninteractively, then set an initial password using psql with the peer > auth conn over a unix socket. Christoph