Deprecations in authentication - Mailing list pgsql-hackers

From Magnus Hagander
Subject Deprecations in authentication
Date
Msg-id CABUevEw=fnKE_G0mYcxb5br-ST8jou9T4JY8Kh6VtkVz+2n25w@mail.gmail.com
Whole thread Raw
Responses Re: Deprecations in authentication  (Simon Riggs <simon@2ndQuadrant.com>)
Re: Deprecations in authentication  (Simon Riggs <simon@2ndquadrant.com>)
Re: Deprecations in authentication  (Robert Haas <robertmhaas@gmail.com>)
Re: Deprecations in authentication  (Peter Eisentraut <peter_e@gmx.net>)
Re: Deprecations in authentication  (Peter Eisentraut <peter_e@gmx.net>)
List pgsql-hackers
Since Simon stirred up a hornets nest suggesting deprecation of a
number of features, I figured I'd take it one step further and suggest
removal of some previously deprecated features :)

In particular, we made a couple of changes over sveral releases back
in the authentication config, that we should perhaps consider
finishing by removing the old stuff now?

1. krb5 authentication. We've had gssapi since 8.3 (which means in all
supported versions). krb5 has been deprecated, also since 8.3. Time to
remove it?

2. ident-over-unix-sockets was renamed to "peer" in 9.1, with the old
syntax deprecated but still mapping to the new one. Has it been there
long enough that we should start throwing an error for ident on unix?


-- Magnus HaganderMe: http://www.hagander.net/Work: http://www.redpill-linpro.com/



pgsql-hackers by date:

Previous
From: Dimitri Fontaine
Date:
Subject: Re: Global Sequences
Next
From: Simon Riggs
Date:
Subject: Re: Deprecations in authentication