public inbox for [email protected]  

help / color / mirror / Atom feed

From: James Cassell <[email protected]>
To: PostgreSQL Yum Package List <[email protected]>
Subject: Re: Can we stop defaulting to 'ident'?
Date: Tue, 19 May 2020 19:29:09 -0400
Message-ID: <[email protected]> (raw)
In-Reply-To: <[email protected]>
References: <CAMsr+YFCuBGWh4=aM-K2LCsBEwcrqm=pphKKHEH09vHwXcspow@mail.gmail.com>
	<[email protected]>
	<[email protected]>
	<[email protected]>

On Tue, May 19, 2020, at 6:26 PM, Devrim Gündüz wrote:
> 
> Hi,
> 
> On Tue, 2020-05-19 at 17:27 -0400, Stephen Frost wrote:
> 
> > +1 to scram-sha-256 for the default for host-based/TCP connections. 
> > For local, we should be using peer, just like Debian's default has
> > been for ages.
> 
> YEah, this is what I committed just now. Still, would love to hear from
> others if there are any objections.
> 
> I used --pwfile=/dev/zero during initdb.
> 

I'm still using ident authentication quite successfully on Fedora and RHEL. (authd package)

Here's my trivial config, just tested on Fedora 32 (tested using the stock, not PGDG packages, but same concept applies): https://github.com/jamescassell/ansible-role-postgresql/blob/master/tasks/main.yml


V/r,
James Cassell

view thread (54+ messages)  latest in thread

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected]
  Subject: Re: Can we stop defaulting to 'ident'?
  In-Reply-To: <[email protected]>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox