Re: Is "trust" really a good default?

From: Peter Eisentraut <peter_e(at)gmx(dot)net>
To: "Magnus Hagander" <mha(at)sollentuna(dot)net>, "Bruce Momjian" <pgman(at)candle(dot)pha(dot)pa(dot)us>
Cc: "Tom Lane" <tgl(at)sss(dot)pgh(dot)pa(dot)us>, <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Is "trust" really a good default?
Date: 2004-07-15 21:17:47
Message-ID: 200407152317.47506.peter_e@gmx.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Magnus Hagander wrote:
> Certainly, I'm not saying it shuold change (I've given that up by
> now). But the difference would be that if you used -W with initdb, it
> would change the default *for that installation*.
> Initdb-with-no-parameters would stay the same to keep people who
> don't know about the switches happier.

The fallacy with this line of thought is that it assumes that one
authentication scheme applies to all ways of connecting. Often, the
postgres account is not password protected for local access, for the
benefit of autovacuum and that sort of maintenance. Still I might like
passwords for remote access. The bottom line is, the user has to
figure this out himself.

--
Peter Eisentraut
http://developer.postgresql.org/~petere/

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Tom Lane 2004-07-15 21:33:56 Note about robustness of transaction-related data structures
Previous Message Magnus Hagander 2004-07-15 21:12:32 Re: [HACKERS] Weird new time zone