Re: Should we really recommend "-A md5 or -A password"?

[Jonathan S. Katz]

On 5/31/22 8:35 AM, Magnus Hagander wrote:

On Tue, May 31, 2022 at 2:29 PM Daniel Westermann (DWE) <daniel.westerm...@dbi-services.com <mailto:daniel.westerm...@dbi-services.com>> wrote:

    Hi,

    I just came across this:
    "Also, specify -A md5 or -A password so that the default trust
    authentication mode is not used;"
    https://www.postgresql.org/docs/current/creating-cluster.html
    <https://www.postgresql.org/docs/current/creating-cluster.html>

    Shouldn't we change that to "-A scram-sha-256" ?


Yes I think we absolutely should!

+1



Jonathan

diff --git a/doc/src/sgml/runtime.sgml b/doc/src/sgml/runtime.sgml
index 62cec614d3..fac9b6b3bd 100644
--- a/doc/src/sgml/runtime.sgml
+++ b/doc/src/sgml/runtime.sgml
@@ -199,8 +199,8 @@ postgres$ <userinput>initdb -D 
/usr/local/pgsql/data</userinput>
      <primary>password</primary>
      <secondary>of the superuser</secondary>
    </indexterm>
-   Also, specify <option>-A md5</option> or
-   <option>-A password</option> so that the default <literal>trust</literal> 
authentication
+   Also, specify <option>-A scram-sha-256</option>
+   so that the default <literal>trust</literal> authentication
    mode is not used; or modify the generated <filename>pg_hba.conf</filename>
    file after running <command>initdb</command>, but
    <emphasis>before</emphasis> you start the server for the first time. (Other

Proposed patch attached. This also removes "-A password" from that sentence as well.

OpenPGP_signature
Description: OpenPGP digital signature