Re: Use "samehost" by default in pg_hba.conf?
От | Peter Eisentraut |
---|---|
Тема | Re: Use "samehost" by default in pg_hba.conf? |
Дата | |
Msg-id | 1254371438.26664.5.camel@vanquo.pezone.net обсуждение исходный текст |
Ответ на | Use "samehost" by default in pg_hba.conf? (Tom Lane <tgl@sss.pgh.pa.us>) |
Ответы |
Re: Use "samehost" by default in pg_hba.conf?
Re: Use "samehost" by default in pg_hba.conf? |
Список | pgsql-hackers |
On Wed, 2009-09-30 at 22:08 -0400, Tom Lane wrote: > # local connections via TCP/IP: > host all all samehost @authmethod@ > > The advantage of this is that connections made with "-h machine_name" > instead of "-h localhost" would work without customization. I can't > see any disadvantage to it. Making the change now would also give > us an opportunity to test the samehost/samenet implementation in the > buildfarm, at least for machines without Unix sockets. > > (Note that you would still need a non-default setting of > listen_addresses for "-h machine_name" to actually work.) Which makes this proposal kind of uninteresting. Plus, with @authmethod@ being mostly "trust", how much faith do we have in samehost never giving any false positives? Sounds uncomfortable to me.
В списке pgsql-hackers по дате отправления: