Re: initdb recommendations

On 2019-07-24 22:18, Tom Lane wrote:
>> I think we could just define that if geteuid == getpeereid, then
>> authentication succeeds.  Possibly make that a setting if someone wants
>> to turn it off.
> 
> We would still need to make the proposed buildfarm changes, though,
> because Windows.  (And HPUX, though if it were the only holdout
> maybe we could consider blowing it off.)
> 
> I'm not that excited about weakening our authentication rules
> just to make things easier for the buildfarm.

Yes, this idea is separate from those buildfarm changes.

> It's possible that what you suggest is a good idea anyway to reduce
> the user impact of switching from trust to peer as default auth.
> However, I'm a little worried that we'll start getting a lot of "it
> works in psql but I can't connect via JDBC-or-whatever" complaints.

Well, the existence of "local" vs. "host" already has that effect anyway.

-- 
Peter Eisentraut              http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services