Re: Can we stop defaulting to 'ident'? - Mailing list pgsql-pkg-yum

From Peter Eisentraut
Subject Re: Can we stop defaulting to 'ident'?
Date
Msg-id 3869d8c9-c212-8d73-52f4-13b03abe4813@2ndquadrant.com
Whole thread Raw
In response to Re: Can we stop defaulting to 'ident'?  (Devrim Gündüz <devrim@gunduz.org>)
Responses Re: Can we stop defaulting to 'ident'?  (Christoph Berg <myon@debian.org>)
Re: Can we stop defaulting to 'ident'?  (Devrim Gündüz <devrim@gunduz.org>)
List pgsql-pkg-yum
On 2020-05-20 00:26, Devrim Gündüz wrote:
>> +1 to scram-sha-256 for the default for host-based/TCP connections.
>> For local, we should be using peer, just like Debian's default has
>> been for ages.
> 
> YEah, this is what I committed just now. Still, would love to hear from
> others if there are any objections.

The upstream default is still to use md5 passwords by default, and some 
deliberation has gone into that to keep it that way.  So it would make 
sense to have the RPMs also do that.  The Debian packages also still use 
md5.  Some consistency across the board would be good.  Otherwise it 
will be very confusing for users if everyone just goes into their own 
direction.

-- 
Peter Eisentraut              http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services



pgsql-pkg-yum by date:

Previous
From: Peter Eisentraut
Date:
Subject: Re: RHEL 6 and PostgreSQL 13
Next
From: Christoph Berg
Date:
Subject: Re: Can we stop defaulting to 'ident'?