Re: Unfriendly handling of pg_hba SSL options with SSL off

Tom Lane <tgl@sss.pgh.pa.us>

From: Tom Lane <tgl@sss.pgh.pa.us>
To: Bruce Momjian <bruce@momjian.us>
Cc: Peter Eisentraut <peter_e@gmx.net>, Robert Haas <robertmhaas@gmail.com>, pgsql-hackers@postgresql.org
Date: 2011-05-10T03:39:42Z
Lists: pgsql-hackers
Bruce Momjian <bruce@momjian.us> writes:
> Late reply, but we are basically ignoring 'local' lines if the build
> doesn't support unix domain sockets (windows), but throwing an error for
> hostssl usage if ssl is not compiled in.  Is the only logic here that
> 'local' is part of the default pg_hba.conf and hostssl is not?  Is that
> good logic?

I wouldn't have a problem with making the Windows port throw an error
for "local" lines.  We'd have to fix initdb to remove that line from the
sample file (if it doesn't already), but that's surely not hard.

			regards, tom lane