Re: Can we stop defaulting to 'ident'? - Mailing list pgsql-pkg-yum

From Stephen Frost
Subject Re: Can we stop defaulting to 'ident'?
Date
Msg-id 20200519212710.GQ13712@tamriel.snowman.net
Whole thread Raw
In response to Re: Can we stop defaulting to 'ident'?  (Devrim Gündüz <devrim@gunduz.org>)
Responses Re: Can we stop defaulting to 'ident'?  (Devrim Gündüz <devrim@gunduz.org>)
List pgsql-pkg-yum
Greetings,

* Devrim Gündüz (devrim@gunduz.org) wrote:
> On Thu, 2019-12-19 at 12:58 +0800, Craig Ringer wrote:
> > 'ident' doesn't work by default on any RPM disto.
>
> So, I am thinking of switching to scram-sha-256 by default. We need to
> do this sooner or later anyway. We can blame "13", if someone
> complains.
>
> Any objections? I'm pulling the trigger for 13beta1. It means I'll also
> set the default in postgresql.conf to scram auth as well.

+1 to scram-sha-256 for the default for host-based/TCP connections.  For
local, we should be using peer, just like Debian's default has been for
ages.

Thanks,

Stephen

Attachment

pgsql-pkg-yum by date:

Previous
From: Devrim Gündüz
Date:
Subject: Re: Can we stop defaulting to 'ident'?
Next
From: David Ghedini
Date:
Subject: Re: Can we stop defaulting to 'ident'?