Re: security issues - Mailing list pgsql-admin

From Tom Lane
Subject Re: security issues
Date
Msg-id 70797.1639154487@sss.pgh.pa.us
Whole thread Raw
In response to Re: security issues  (Laurenz Albe <laurenz.albe@cybertec.at>)
List pgsql-admin
Laurenz Albe <laurenz.albe@cybertec.at> writes:
> On Fri, 2021-12-10 at 15:33 +0100, Frank Eckes wrote:
>> And even worse, if i define a foreign server (e.g ORACLE) everybody can 
>> see the credentials in a user mapping

> Then you use Oracle external authentication, for example with a
> secure key store on the PostgreSQL server.  Then you don't need a
> password.

That's one way, but AFAIK the above claim is nonsense.  You can
only see the connection options for user mappings that belong
to you (unless you're a superuser).

            regards, tom lane



pgsql-admin by date:

Previous
From: "David G. Johnston"
Date:
Subject: Re: security issues
Next
From: Haroldo Stenger
Date:
Subject: Re: security issues