Re: Security with V9.3.3 standby servers - Mailing list pgsql-admin

From Peter Eisentraut
Subject Re: Security with V9.3.3 standby servers
Date
Msg-id 54F0BF55.6020002@gmx.net
Whole thread Raw
In response to Security with V9.3.3 standby servers  (John Scalia <jayknowsunix@gmail.com>)
List pgsql-admin
On 2/26/15 11:15 AM, John Scalia wrote:
> An edict has been handed down here from on high that no script shall
> ever contain any password in cleartext for any reason. Well this is
> problem with a streaming replication standby server's recovery.conf file
> as the line primary_conninfo = contains said replication user's password
> for that connection. Is there any sort of plan to allow this to be md5
> or some such encoded? Or what else could I do in this case?

You can put the password in the a .pgpass file.  Not sure if that counts
as a "script".

Or you can do away with passwords and authenticate using SSL client
certificates.



pgsql-admin by date:

Previous
From: Lou Picciano
Date:
Subject: Re: Installing PostgreSQL fails
Next
From: Josef Springer
Date:
Subject: Re: Installing PostgreSQL fails