Josh Berkus <josh(at)agliodbs(dot)com> writes:
> Any reason why this is a bad idea?
It breaks client compatibility --- I don't think any existing clients
are prepared to be challenged multiple times, and indeed the protocol
spec specifically advises clients to drop the connection if they can't
handle the first challenge method. We'd need a protocol extension
by which a client could respond "I can't do that Dave".
We could put it on the to-do list for the next protocol version bump,
perhaps. I'm not in a hurry for one though...
regards, tom lane