On 2019-07-24 22:18, Tom Lane wrote: >> I think we could just define that if geteuid == getpeereid, then >> authentication succeeds. Possibly make that a setting if someone wants >> to turn it off. > > We would still need to make the proposed buildfarm changes, though, > because Windows. (And HPUX, though if it were the only holdout > maybe we could consider blowing it off.) > > I'm not that excited about weakening our authentication rules > just to make things easier for the buildfarm.
Yes, this idea is separate from those buildfarm changes. > It's possible that what you suggest is a good idea anyway to reduce > the user impact of switching from trust to peer as default auth. > However, I'm a little worried that we'll start getting a lot of "it > works in psql but I can't connect via JDBC-or-whatever" complaints. Well, the existence of "local" vs. "host" already has that effect anyway. -- Peter Eisentraut http://www.2ndQuadrant.com/ PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services
