Re: ident authentication over tcp - Mailing list pgsql-admin

From Peter Koczan
Subject Re: ident authentication over tcp
Date
Msg-id 4544e0330912100821p1b404450sec1895675be7ddd4@mail.gmail.com
Whole thread Raw
In response to Re: ident authentication over tcp  (Adam Tauno Williams <awilliam@opengroupware.us>)
List pgsql-admin
On Wed, Dec 9, 2009 at 3:29 PM, Adam Tauno Williams
<awilliam@opengroupware.us> wrote:
> On Wed, 2009-12-09 at 15:18 -0600, Peter Koczan wrote:
>> I found the packages. I'm still confused why local ident
>> authentication works even without a running ident server, though. Does
>> anyone know why that is?
>
> Does "local" really use ident?  I always assumed local-ident was just
> aliased to an NSS call.
>
> Seriously, ident is dead, obsolete, and insecure tech.  You are best
> just not using it.

I was just considering it as one possibility for a limited purpose,
and after reading up I'm going to try something else.

> If by "local ident" you mean "when connecting thru unix-domain sockets" then
> read here:
>
> http://www.postgresql.org/docs/current/static/auth-methods.html#AEN28519

Yep, that's what I meant. Thanks for the info.

Thanks again,
Peter

pgsql-admin by date:

Previous
From: Mahesh Paolini-Subramanya
Date:
Subject: Is vacuumdb an "all or nothing" operation?
Next
From: Venkateswara Rao Bondada
Date:
Subject: How to view the code of a function