Re: ident auth vs. encrypting ident daemons

From: Andrew Dunstan <andrew(at)dunslane(dot)net>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: pgsql-hackers(at)postgresql(dot)org, pgsqlrpms-hackers(at)pgfoundry(dot)org
Subject: Re: ident auth vs. encrypting ident daemons
Date: 2006-06-16 14:51:10
Message-ID: 4492C55E.3080701@dunslane.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Tom Lane wrote:

>* I'm inclined to make the Red Hat RPMs default to ident on socket and
>md5 on localhost ... any comments about that?
>
>
>
>

I typically use something like this on RH platforms and friends for the
system db cluster:

local all postgres ident sameuser
local all all md5
host all all 127.0.0.1/32 md5

Not using ident on tcp connections would be a good thing.

I think an extra initdb switch is probably warranted.

cheers

andrew

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Kris Kennaway 2006-06-16 15:11:43 Re: postgresql and process titles
Previous Message Tom Lane 2006-06-16 14:23:23 Re: Re-thing PG_MODULE_MAGIC