Magnus Hagander wrote:
> 2010/4/1 Christophe Dore <c.dore@castsoftware.com>:
> >
> > - is there any configuration that can be done on server side to prevent
> > the client side to use such file to read passwords ?
>
> No. It happens before the user ha slogged in, obviously.
>
>
> > - is there any options that can be set in postgres libpq C library to
> > prevent the connection functions to search for password in files ?
>
> No, but you could possibly set the PGPASSFILE environment variable to
> a place where you *know* there won't be a pgpass file, if you can
> determine such a place.
/dev/null?
--
Bruce Momjian <bruce@momjian.us> http://momjian.us
EnterpriseDB http://enterprisedb.com
