From: | Prasad <prasad(dot)s(at)mail(dot)com> |
---|---|
To: | "Dave Page" <dpage(at)pgadmin(dot)org> |
Cc: | "pgAdmin Support" <pgadmin-support(at)postgresql(dot)org>, Clodoaldo <clodoaldo(dot)pinto(dot)neto(at)gmail(dot)com> |
Subject: | Re: Re: Unknown token in connection string |
Date: | 2015-03-05 09:59:33 |
Message-ID: | trinity-74dac997-17a2-4f27-ae6f-20047e33b3cf-1425549572635@3capp-mailcom-lxa06 |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgadmin-support |
I think, it's not very clear from documentation, when user see "connection string" ,they will tempt to use password as well , as one normally do.
http://www.pgadmin.org/docs/1.20/commandline.html
regards,
Prasad
Sent: Thursday, March 05, 2015 at 8:53 AM
From: "Dave Page" <dpage(at)pgadmin(dot)org>
To: Prasad <prasad(dot)s(at)mail(dot)com>
Cc: "pgAdmin Support" <pgadmin-support(at)postgresql(dot)org>, Clodoaldo <clodoaldo(dot)pinto(dot)neto(at)gmail(dot)com>
Subject: Re: [pgadmin-support] Re: Unknown token in connection string
On Wed, Mar 4, 2015 at 10:54 PM, Prasad <prasad(dot)s(at)mail(dot)com> wrote:
> Looking at code, it looks like "connection string", is not expecting any password and will prompt for one. May well possibly a bug.
No, it's a security "feature". Using passwords on the command line is
a bad idea as other users can see it in ps output etc. Use a
PGPASSFILE instead.
--
Dave Page
Blog: http://pgsnake.blogspot.com
Twitter: @pgsnake
EnterpriseDB UK: http://www.enterprisedb.com[http://www.enterprisedb.com]
The Enterprise PostgreSQL Company
From | Date | Subject | |
---|---|---|---|
Next Message | Dave Page | 2015-03-05 11:28:20 | Re: Re: Unknown token in connection string |
Previous Message | Dave Page | 2015-03-05 08:53:04 | Re: Re: Unknown token in connection string |