Magnus Hagander <magnus(at)hagander(dot)net> writes:
> That said, if there is a username specified it should not be ignored.
> But if there is none specified, it should work. This works "reasonably
> well" today, in that we pick the username up from the environment. But
> I can see cases where it would be a lot more useful to have it instead
> pick up the username from the authentication system, since they may
> differ.
Are you not describing a behavior that you yourself removed in 8.4,
ie the libpq code that looked aside at Kerberos for a username?
regards, tom lane