Thread: Re: iso-8859-1 token in connection string

Re: iso-8859-1 token in connection string

From
Prasad
Date:
Looking at code, it looks like "connection string", is not expecting any password and will prompt for one. May well
possiblya bug. 

regards,
Prasad



Re: Re: Unknown token in connection string

From
Dave Page
Date:
On Wed, Mar 4, 2015 at 10:54 PM, Prasad <prasad.s@mail.com> wrote:
> Looking at code, it looks like "connection string", is not expecting any password and will prompt for one. May well
possiblya bug.
 

No, it's a security "feature". Using passwords on the command line is
a bad idea as other users can see it in ps output etc. Use a
PGPASSFILE instead.

-- 
Dave Page
Blog: http://pgsnake.blogspot.com
Twitter: @pgsnake

EnterpriseDB UK: http://www.enterprisedb.com
The Enterprise PostgreSQL Company



Re: Re: Unknown token in connection string

From
Prasad
Date:
I think, it's not very clear from documentation, when user see "connection string" ,they will tempt to use password as
well, as one normally do. 
http://www.pgadmin.org/docs/1.20/commandline.html

regards,
Prasad
 
 

Sent: Thursday, March 05, 2015 at 8:53 AM
From: "Dave Page" <dpage@pgadmin.org>
To: Prasad <prasad.s@mail.com>
Cc: "pgAdmin Support" <pgadmin-support@postgresql.org>, Clodoaldo <clodoaldo.pinto.neto@gmail.com>
Subject: Re: [pgadmin-support] Re: Unknown token in connection string
On Wed, Mar 4, 2015 at 10:54 PM, Prasad <prasad.s@mail.com> wrote:
> Looking at code, it looks like "connection string", is not expecting any password and will prompt for one. May well
possiblya bug. 

No, it's a security "feature". Using passwords on the command line is
a bad idea as other users can see it in ps output etc. Use a
PGPASSFILE instead.

--
Dave Page
Blog: http://pgsnake.blogspot.com
Twitter: @pgsnake

EnterpriseDB UK: http://www.enterprisedb.com[http://www.enterprisedb.com]
The Enterprise PostgreSQL Company



Re: Re: Unknown token in connection string

From
Dave Page
Date:
Thanks - I've updated the docs to note this.

On Thu, Mar 5, 2015 at 9:59 AM, Prasad <prasad.s@mail.com> wrote:
> I think, it's not very clear from documentation, when user see "connection string" ,they will tempt to use password
aswell , as one normally do.
 
> http://www.pgadmin.org/docs/1.20/commandline.html
>
> regards,
> Prasad
>
>
>
> Sent: Thursday, March 05, 2015 at 8:53 AM
> From: "Dave Page" <dpage@pgadmin.org>
> To: Prasad <prasad.s@mail.com>
> Cc: "pgAdmin Support" <pgadmin-support@postgresql.org>, Clodoaldo <clodoaldo.pinto.neto@gmail.com>
> Subject: Re: [pgadmin-support] Re: Unknown token in connection string
> On Wed, Mar 4, 2015 at 10:54 PM, Prasad <prasad.s@mail.com> wrote:
>> Looking at code, it looks like "connection string", is not expecting any password and will prompt for one. May well
possiblya bug.
 
>
> No, it's a security "feature". Using passwords on the command line is
> a bad idea as other users can see it in ps output etc. Use a
> PGPASSFILE instead.
>
> --
> Dave Page
> Blog: http://pgsnake.blogspot.com
> Twitter: @pgsnake
>
> EnterpriseDB UK: http://www.enterprisedb.com[http://www.enterprisedb.com]
> The Enterprise PostgreSQL Company



-- 
Dave Page
Blog: http://pgsnake.blogspot.com
Twitter: @pgsnake

EnterpriseDB UK: http://www.enterprisedb.com
The Enterprise PostgreSQL Company