Re: pg_dump automatic

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Andrew Sullivan <andrew(at)libertyrms(dot)info>
Cc: ML-Postrges-general <Pgsql-General(at)postgresql(dot)org>
Subject: Re: pg_dump automatic
Date: 2003-01-25 00:54:14
Message-ID: 27999.1043456054@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Andrew Sullivan <andrew(at)libertyrms(dot)info> writes:
> On Thu, Jan 23, 2003 at 11:41:05PM +0100, Enrico Comini wrote:
>> I have a password on the database, so when the file is executed it prompt
>> for the password.

> You could try setting the PGPASSWORD environment variable in your
> script. I believe someone told me it was getting set to go away,
> though, so it may not help. If your OS supports it, ident over UNIX
> domain sockets is more secure.

PGPASSWORD is insecure on platforms where others can see your
environment variables (which is quite a few Unixen, but not all).
I am not sure we will remove it, but as of 7.3 it's definitely
deprecated. You can put passwords in ~/.pgpass instead.

ident for Unix sockets is a nice alternative if you can use it, too.

regards, tom lane

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Roderick A. Anderson 2003-01-25 01:07:03 Re: Pg 7.3.1 & DBD::Pg 1.21
Previous Message Justin Clift 2003-01-25 00:19:40 Re: Searchable 7.3.1 Documentation - now interactive!