On Wed, 2022-07-13 at 02:53 +0000, Ken Yeung wrote:
> From: Laurenz Albe <laurenz.a...@cybertec.at>
> Sent: Wednesday, July 13, 2022 3:16 AM
> 
> > You configured "pg_hba.conf" so that a local login without password is
> > not possible.  The easiest solution is to change the "pg_hba.conf"
> > entries for "localhost" in IPv4 and IPv6 to "trust" for the duration of
> > the upgrade.
> 
> I am afraid this workaround may not be suitable for our case because of 
> certain security consideration.

If you want to make your life difficult, that's ok.  Remember that this change
would only be for *local* connections for the duration of the upgrade.

As an alternative, you could create a password file or, if that is also too
insecure, set the PGSSLCERT and PGSSLKEY environment variables so that you can
use a client certificate to connect.  Other authentication methods might also
be possible; you'll have to experiment.

Yours,
Laurenz Albe
-- 
Cybertec | https://www.cybertec-postgresql.com


Reply via email to