Re: Automated database backups and authentication

From: "Chad R(dot) Larson" <clarson(at)eldocomp(dot)com>
To: Artur Pietruk <arturp(at)plukwa(dot)pdi(dot)net>, Darren McClelland <darren(at)zonarsystems(dot)com>
Cc: pgsql-admin(at)postgresql(dot)org
Subject: Re: Automated database backups and authentication
Date: 2002-08-06 22:00:17
Message-ID: 4.2.2.20020806145733.00ab4870@ecint.ecinet.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

At 02:34 PM 8/6/02 , Artur Pietruk wrote:
>I think, that in your setup it would be better to do crypt=-auth and:
>- use PGPASSWORD environment variable, just set it before you execute
>pg_dumpall.

The problem with that is most UNIX systems are able to display the contents
of the environment of a process. Some make it easier than others (on BSD
systems, it is as easy as a switch on "ps") but most can do it.

That was (I believe) the reason that the variable was going away in 7.3,
because it is a security hole.

-crl
--
Chad R. Larson (CRL22) chad(at)eldocomp(dot)com
Eldorado Computing, Inc. 602-604-3100
5353 North 16th Street, Suite 400
Phoenix, Arizona 85016-3228

In response to

Responses

Browse pgsql-admin by date

  From Date Subject
Next Message John Madden 2002-08-06 22:07:01 Re: Automated database backups and authentication
Previous Message Andrew Sullivan 2002-08-06 21:49:40 Re: High Availability PostgreSQL HOWTO article