Re: Disabling trust/ident authentication configure option

From: Robert Haas <robertmhaas(at)gmail(dot)com>
To: Stephen Frost <sfrost(at)snowman(dot)net>
Cc: Josh Berkus <josh(at)agliodbs(dot)com>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Andrew Dunstan <andrew(at)dunslane(dot)net>, Alvaro Herrera <alvherre(at)2ndquadrant(dot)com>, Volker Aßmann <volker(dot)assmann(at)gmail(dot)com>, "pgsql-hackers(at)postgresql(dot)org" <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Disabling trust/ident authentication configure option
Date: 2015-05-07 20:47:17
Message-ID: CA+TgmobuF2CdDm=W-gi1XK9OT3kcck511UHigWtC0mus1scGPA@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Thu, May 7, 2015 at 11:02 AM, Stephen Frost <sfrost(at)snowman(dot)net> wrote:
> I realize it's not going to be popular, but I'd love to have 'trust'
> only allowed if a command-line option is passed to the postmaster or
> something along those lines. It's really got no business being an
> option for a network service like PG.

I disagree wholeheartedly. There is such a thing as a trusted network.

--
Robert Haas
EnterpriseDB: http://www.enterprisedb.com
The Enterprise PostgreSQL Company

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Stephen Frost 2015-05-07 20:49:27 Re: Auditing extension for PostgreSQL (Take 2)
Previous Message Peter Eisentraut 2015-05-07 20:42:26 Re: Auditing extension for PostgreSQL (Take 2)