Horton

Thread

Commits

  1. Recommend scram-sha-256 instead of md5 authentication in docs

  1. Should we really recommend "-A md5 or -A password"?

    Daniel Westermann (DWE) <daniel.westermann@dbi-services.com> — 2022-05-31T12:29:28Z

    Hi,

I just came across this:
"Also, specify -A md5 or -A password so that the default trust authentication mode is not used;"
https://www.postgresql.org/docs/current/creating-cluster.html

Shouldn't we change that to "-A scram-sha-256" ?

Regards
Daniel

  2. Re: Should we really recommend "-A md5 or -A password"?

    Magnus Hagander <magnus@hagander.net> — 2022-05-31T12:35:53Z

    On Tue, May 31, 2022 at 2:29 PM Daniel Westermann (DWE) <
daniel.westermann@dbi-services.com> wrote:

> Hi,
>
> I just came across this:
> "Also, specify -A md5 or -A password so that the default trust
> authentication mode is not used;"
> https://www.postgresql.org/docs/current/creating-cluster.html
>
> Shouldn't we change that to "-A scram-sha-256" ?
>

Yes I think we absolutely should!

-- 
 Magnus Hagander
 Me: https://www.hagander.net/ <http://www.hagander.net/>
 Work: https://www.redpill-linpro.com/ <http://www.redpill-linpro.com/>

  3. Re: Should we really recommend "-A md5 or -A password"?

    Jonathan S. Katz <jkatz@postgresql.org> — 2022-05-31T13:57:31Z

    On 5/31/22 8:35 AM, Magnus Hagander wrote:
> 
> 
> On Tue, May 31, 2022 at 2:29 PM Daniel Westermann (DWE) 
> <daniel.westermann@dbi-services.com 
> <mailto:daniel.westermann@dbi-services.com>> wrote:
> 
>     Hi,
> 
>     I just came across this:
>     "Also, specify -A md5 or -A password so that the default trust
>     authentication mode is not used;"
>     https://www.postgresql.org/docs/current/creating-cluster.html
>     <https://www.postgresql.org/docs/current/creating-cluster.html>
> 
>     Shouldn't we change that to "-A scram-sha-256" ?
> 
> 
> Yes I think we absolutely should!

+1

Proposed patch attached. This also removes "-A password" from that 
sentence as well.

Jonathan

  4. Re: Should we really recommend "-A md5 or -A password"?

    Magnus Hagander <magnus@hagander.net> — 2022-05-31T20:03:16Z

    On Tue, May 31, 2022 at 3:57 PM Jonathan S. Katz <jkatz@postgresql.org>
wrote:

> On 5/31/22 8:35 AM, Magnus Hagander wrote:
> >
> >
> > On Tue, May 31, 2022 at 2:29 PM Daniel Westermann (DWE)
> > <daniel.westermann@dbi-services.com
> > <mailto:daniel.westermann@dbi-services.com>> wrote:
> >
> >     Hi,
> >
> >     I just came across this:
> >     "Also, specify -A md5 or -A password so that the default trust
> >     authentication mode is not used;"
> >     https://www.postgresql.org/docs/current/creating-cluster.html
> >     <https://www.postgresql.org/docs/current/creating-cluster.html>
> >
> >     Shouldn't we change that to "-A scram-sha-256" ?
> >
> >
> > Yes I think we absolutely should!
>
> +1
>
> Proposed patch attached. This also removes "-A password" from that
> sentence as well.
>

Applied and backpatched to 14. Thanks!

-- 
 Magnus Hagander
 Me: https://www.hagander.net/ <http://www.hagander.net/>
 Work: https://www.redpill-linpro.com/ <http://www.redpill-linpro.com/>