Re: psql and passwords - Mailing list pgsql-general

From Bruce Momjian
Subject Re: psql and passwords
Date
Msg-id 200204160334.g3G3YhH04170@candle.pha.pa.us
Whole thread Raw
In response to Re: psql and passwords  (Curt Sampson <cjs@cynic.net>)
List pgsql-general
Curt Sampson wrote:
> On 15 Apr 2002, Doug McNaught wrote:
>
> > "Nigel J. Andrews" <nandrews@investsystems.co.uk> writes:
> >
> > > Anyway, the solution is to set PGPASSWORD in the evironment. Once I
> > > remembered about that it all became so much easier.
> >
> > Note that this is potentially insecure as some systems expose your
> > environment to other users.
>
> Indeed. What about adding an option whose argument is the name of
> a file containing the password?

Already on TODO and I hope it is done for 7.3:

* Add PGPASSWORDFILE environment variable or ~/.pgpass to store
  user/host/password combinations

We even have:

* Remove PGPASSWORD because it is insecure on some OS's

--
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman@candle.pha.pa.us               |  (610) 853-3000
  +  If your life is a hard drive,     |  830 Blythe Avenue
  +  Christ can be your backup.        |  Drexel Hill, Pennsylvania 19026

pgsql-general by date:

Previous
From: Curt Sampson
Date:
Subject: Re: psql and passwords
Next
From: postgres@vrane.com
Date:
Subject: 'cluster' messes up a table