User-Agent: Cyrus-JMAP/3.3.0-dev0-464-g810d66a-fmstable-20200518v1
Mime-Version: 1.0
Message-Id: <591d44bc-54f9-4db2-bb54-2ad988fe1d52@www.fastmail.com>
In-Reply-To: <6089d4c8e262dd6fe8a6510c283e674543a24b5c.camel@gunduz.org>
References: 
 <CAMsr+YFCuBGWh4=aM-K2LCsBEwcrqm=pphKKHEH09vHwXcspow@mail.gmail.com>
 <7761d006b5ace13a4d86ce489123e5004aaf8b6c.camel@gunduz.org>
 <20200519212710.GQ13712@tamriel.snowman.net>
 <6089d4c8e262dd6fe8a6510c283e674543a24b5c.camel@gunduz.org>
Date: Tue, 19 May 2020 19:29:09 -0400
From: "James Cassell" <fedoraproject@cyberpear.com>
To: "PostgreSQL Yum Package List" <pgsql-pkg-yum@lists.postgresql.org>
Subject: Re: Can we stop defaulting to 'ident'?
Content-Type: text/plain;charset=utf-8
Content-Transfer-Encoding: quoted-printable
Precedence: bulk

On Tue, May 19, 2020, at 6:26 PM, Devrim G=C3=BCnd=C3=BCz wrote:
>=20
> Hi,
>=20
> On Tue, 2020-05-19 at 17:27 -0400, Stephen Frost wrote:
>=20
> > +1 to scram-sha-256 for the default for host-based/TCP connections.=20=

> > For local, we should be using peer, just like Debian's default has
> > been for ages.
>=20
> YEah, this is what I committed just now. Still, would love to hear fro=
m
> others if there are any objections.
>=20
> I used --pwfile=3D/dev/zero during initdb.
>=20

I'm still using ident authentication quite successfully on Fedora and RH=
EL. (authd package)

Here's my trivial config, just tested on Fedora 32 (tested using the sto=
ck, not PGDG packages, but same concept applies): https://github.com/jam=
escassell/ansible-role-postgresql/blob/master/tasks/main.yml


V/r,
James Cassell