Re: password method in pg_hba.conf fails - Mailing list pgsql-general

From Bruce Momjian
Subject Re: password method in pg_hba.conf fails
Date
Msg-id 200303071922.h27JMMa14283@candle.pha.pa.us
Whole thread Raw
In response to Re: password method in pg_hba.conf fails  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-general
Tom Lane wrote:
> > I thought about implementing a PAM for this, since 7.3 supports
> > PAM. What do you think about it?
>
> The whole point of PAM is to allow installation-local authentication
> methods, so you could easily set up something that checks a password
> against /etc/passwd if you like.  (There is surely such a PAM module
> out there already, I'd expect, so look before you write.)
>
> If your OS supports it, you might also want to consider using
> Unix-socket-IDENT authentication, and forget passwords altogether.

Right. If you are using unix socket, they have already logged in, and
'local ident' allow you to know for sure who is on the other end of the
socket.

--
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman@candle.pha.pa.us               |  (610) 359-1001
  +  If your life is a hard drive,     |  13 Roberts Road
  +  Christ can be your backup.        |  Newtown Square, Pennsylvania 19073

pgsql-general by date:

Previous
From: Bruce Momjian
Date:
Subject: Re: replicating DDL statements
Next
From: Bruce Momjian
Date:
Subject: Re: division by zero