| From: | Stephen Frost <sfrost(at)snowman(dot)net> |
|---|---|
| To: | Devrim Gündüz <devrim(at)gunduz(dot)org> |
| Cc: | Craig Ringer <craig(at)2ndquadrant(dot)com>, pgsql-pkg-yum <pgsql-pkg-yum(at)postgresql(dot)org> |
| Subject: | Re: Can we stop defaulting to 'ident'? |
| Date: | 2020-05-19 21:27:10 |
| Message-ID: | 20200519212710.GQ13712@tamriel.snowman.net |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-pkg-debian pgsql-pkg-yum |
Greetings,
* Devrim Gündüz (devrim(at)gunduz(dot)org) wrote:
> On Thu, 2019-12-19 at 12:58 +0800, Craig Ringer wrote:
> > 'ident' doesn't work by default on any RPM disto.
>
> So, I am thinking of switching to scram-sha-256 by default. We need to
> do this sooner or later anyway. We can blame "13", if someone
> complains.
>
> Any objections? I'm pulling the trigger for 13beta1. It means I'll also
> set the default in postgresql.conf to scram auth as well.
+1 to scram-sha-256 for the default for host-based/TCP connections. For
local, we should be using peer, just like Debian's default has been for
ages.
Thanks,
Stephen
| From | Date | Subject | |
|---|---|---|---|
| Next Message | David Ghedini | 2020-05-19 22:08:00 | Re: Can we stop defaulting to 'ident'? |
| Previous Message | Devrim Gündüz | 2020-05-19 20:22:06 | Re: Can we stop defaulting to 'ident'? |
| From | Date | Subject | |
|---|---|---|---|
| Next Message | David Ghedini | 2020-05-19 22:08:00 | Re: Can we stop defaulting to 'ident'? |
| Previous Message | Devrim Gündüz | 2020-05-19 20:22:06 | Re: Can we stop defaulting to 'ident'? |