Re: adding PGPASSWORDFILE to libpq

From: Alvaro Herrera <alvherre(at)atentus(dot)com>
To: Peter Eisentraut <peter_e(at)gmx(dot)net>
Cc: pgsql-patches(at)postgresql(dot)org
Subject: Re: adding PGPASSWORDFILE to libpq
Date: 2002-08-10 03:46:13
Message-ID: Pine.LNX.4.44.0208092338480.18172-100000@David
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-patches

Peter Eisentraut dijo:

> Alvaro Herrera writes:
>
> > Currently the format for the file should be
> >
> > host:port:database:user:password
>
> I think just the password. If you need a different password, select a
> different file.

All right, maybe there's not a lot of people who will use more than one
password, but who wants to deal with the inconvenience of having lots of
files with passwords if you can have only one?

> The sort of format you propose makes it much too convenient for users to
> build password databases in files, which kind of defeats the point of
> passwords.

What's wrong with providing "too much convenience"? The file is/should
protected from other users anyway, which I think is the whole point.

Having different files and being forced to identify them by their name or
location is a kind of "password database" anyway.

--
Alvaro Herrera (<alvherre[a]atentus.com>)
"La espina, desde que nace, ya pincha" (Proverbio africano)

In response to

Browse pgsql-patches by date

  From Date Subject
Next Message Tom Lane 2002-08-10 04:52:57 Re: Proposal: stand-alone composite types
Previous Message Bruce Momjian 2002-08-10 01:59:30 Re: Proposal: stand-alone composite types