Re: Subprocess generated password

Hi,

 

I have been hacking on a feature that instead of using a static password when connecting to the psql server executes a subprocess which prints a temporary auth token to stdout.

 

This is to make the workflow more bearable when using AWS RDS with iam authentication.

 

aws-iam auth tokens are generated with the ASW cli, used as sql password, and expires after 15 minutes. That means that any reconnects after that time will fail – and not in a way that spawns any password dialog (“FATAL: PAM authentication failed”).

 

I’m thinking of the feature like an addition to “passfile”, lets call it “passexec”.

 

2 new (advanced?) server settings:

* passexec cmd line

* passexec expiry minutes

 

If last passexec is older than expiry, a new invocation result is used – basically an expiring cache.

 

I think this would benefit the pgadmin community – would you be interested in a PR?

 

/Elias