From: | Hannu Krosing <hannu(at)tm(dot)ee> |
---|---|
To: | Lincoln Yeoh <lyeoh(at)pop(dot)jaring(dot)my> |
Cc: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us>, Christopher Kings-Lynne <chriskl(at)familyhealth(dot)com(dot)au>, Hackers <pgsql-hackers(at)postgresql(dot)org> |
Subject: | Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens up |
Date: | 2001-11-28 15:03:47 |
Message-ID: | 3C04FCD3.6271235D@tm.ee |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-hackers |
Lincoln Yeoh wrote:
>
> At 01:08 AM 11/28/01 -0500, Tom Lane wrote:
> >Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> writes:
> >> ... But because we are Internet-enabled,
> >> and because our insecurity is only local, it seems OK to people.
> >
> >It's not that it's "okay", it's that we haven't got any good
> >alternatives. Password auth sucks from a convenience point of view
> >(or even from a possibility point of view, for scripts; don't forget
> >the changes that you yourself recently applied to guarantee that a
> >script *cannot* supply a password to psql). Ident auth doesn't work,
> >
>
> Ack. We can't send in passwords to psql anymore? :(
>
> Is there a safe way to send username and password to psql?
smbclient does it via a file which must be 0600, but I don't know if
psql has anything like that.
-----------
Hannu
From | Date | Subject | |
---|---|---|---|
Next Message | Vince Vielhaber | 2001-11-28 15:10:40 | Re: Sequence docs |
Previous Message | Thomas Lockhart | 2001-11-28 15:03:07 | Re: Sequence docs |