Re: Use "samehost" by default in pg_hba.conf? - Mailing list pgsql-hackers

From Peter Eisentraut
Subject Re: Use "samehost" by default in pg_hba.conf?
Date
Msg-id 1254371438.26664.5.camel@vanquo.pezone.net
Whole thread Raw
In response to Use "samehost" by default in pg_hba.conf?  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: Use "samehost" by default in pg_hba.conf?  (Tom Lane <tgl@sss.pgh.pa.us>)
Re: Use "samehost" by default in pg_hba.conf?  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-hackers
On Wed, 2009-09-30 at 22:08 -0400, Tom Lane wrote:
> # local connections via TCP/IP:
> host    all         all         samehost              @authmethod@
> 
> The advantage of this is that connections made with "-h machine_name"
> instead of "-h localhost" would work without customization.  I can't
> see any disadvantage to it.  Making the change now would also give
> us an opportunity to test the samehost/samenet implementation in the
> buildfarm, at least for machines without Unix sockets.
> 
> (Note that you would still need a non-default setting of
> listen_addresses for "-h machine_name" to actually work.)

Which makes this proposal kind of uninteresting.

Plus, with @authmethod@ being mostly "trust", how much faith do we have
in samehost never giving any false positives?

Sounds uncomfortable to me.



pgsql-hackers by date:

Previous
From: Peter Eisentraut
Date:
Subject: Re: Unicode UTF-8 table formatting for psql text output
Next
From: Tom Lane
Date:
Subject: Re: Use "samehost" by default in pg_hba.conf?